vulnerability
Amazon Linux 2023: CVE-2021-44648: Medium priority package update for gdk-pixbuf2
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:L/Au:N/C:P/I:P/A:C) | 2022-01-12 | 2025-02-17 | 2025-02-17 |
Severity
6
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:C)
Published
2022-01-12
Added
2025-02-17
Modified
2025-02-17
Description
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
A flaw was found in gdk-pixbuf. The vulnerability occurs due to the index overwriting in the lzw_decoder_new function, leading to a heap buffer overflow. This flaw allows an attacker to input a specially crafted GIF file, leading to a crash or code execution.
A flaw was found in gdk-pixbuf. The vulnerability occurs due to the index overwriting in the lzw_decoder_new function, leading to a heap buffer overflow. This flaw allows an attacker to input a specially crafted GIF file, leading to a crash or code execution.
Solution(s)
amazon-linux-2023-upgrade-gdk-pixbuf2amazon-linux-2023-upgrade-gdk-pixbuf2-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-debugsourceamazon-linux-2023-upgrade-gdk-pixbuf2-develamazon-linux-2023-upgrade-gdk-pixbuf2-devel-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-modulesamazon-linux-2023-upgrade-gdk-pixbuf2-modules-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-testsamazon-linux-2023-upgrade-gdk-pixbuf2-tests-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.