GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2 | May 15, 2023 | Jan 12, 2022 |
| Alpine Linux | — | Upgrade gdk-pixbuf | Mar 26, 2024 | Jan 12, 2022 |
| Amazon_linux_2023 | — | Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-tests-debuginfo | Feb 17, 2025 | Jan 12, 2022 |
| Centos_linux | — | Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-modules | May 15, 2023 | Jan 12, 2022 |
| Debian | — | Upgrade gdk-pixbuf | Nov 4, 2022 | Jan 12, 2022 |
| Oracle_linux | — | Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2 | May 17, 2023 | Jan 12, 2022 |
| Redhat_linux | — | Upgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-devel-debuginfo | May 15, 2023 | Jan 12, 2022 |
| Suse | — | Upgrade gdk-pixbuf-thumbnailerUpgrade gdk-pixbuf-devel-32bitUpgrade typelib-1_0-GdkPixbuf-2_0Upgrade typelib-1_0-GdkPixdata-2_0Upgrade libgdk_pixbuf-2_0-0-32bitUpgrade gdk-pixbuf-develUpgrade gdk-pixbuf-query-loadersUpgrade libgdk_pixbuf-2_0-0Upgrade gdk-pixbuf-query-loaders-32bitUpgrade gdk-pixbuf-lang | Oct 26, 2022 | Jan 12, 2022 |
| Ubuntu | — | Upgrade libgdk-pixbuf-2.0-0Upgrade libgdk-pixbuf2.0-0 | Sep 14, 2022 | Jan 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub