vulnerability
Amazon Linux 2023: CVE-2021-44648: Medium priority package update for gdk-pixbuf2
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:L/Au:N/C:P/I:P/A:C) | 01/12/2022 | 02/17/2025 | 02/17/2025 |
Severity
6
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:C)
Published
01/12/2022
Added
02/17/2025
Modified
02/17/2025
Description
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
A flaw was found in gdk-pixbuf. The vulnerability occurs due to the index overwriting in the lzw_decoder_new function, leading to a heap buffer overflow. This flaw allows an attacker to input a specially crafted GIF file, leading to a crash or code execution.
A flaw was found in gdk-pixbuf. The vulnerability occurs due to the index overwriting in the lzw_decoder_new function, leading to a heap buffer overflow. This flaw allows an attacker to input a specially crafted GIF file, leading to a crash or code execution.
Solution(s)
amazon-linux-2023-upgrade-gdk-pixbuf2amazon-linux-2023-upgrade-gdk-pixbuf2-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-debugsourceamazon-linux-2023-upgrade-gdk-pixbuf2-develamazon-linux-2023-upgrade-gdk-pixbuf2-devel-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-modulesamazon-linux-2023-upgrade-gdk-pixbuf2-modules-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-testsamazon-linux-2023-upgrade-gdk-pixbuf2-tests-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.