GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2 | May 15, 2023 | Jul 24, 2022 |
| Amazon_linux_2023 | — | Upgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-tests | Feb 17, 2025 | Jul 24, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 24, 2022 |
| Centos_linux | — | Upgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-devel | May 15, 2023 | Jul 24, 2022 |
| Debian | — | Upgrade gdk-pixbuf | Nov 4, 2022 | Jul 24, 2022 |
| Oracle_linux | — | Upgrade gdk-pixbuf2Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modules | May 17, 2023 | Jul 24, 2022 |
| Redhat_linux | — | Upgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-devel-debuginfo | May 15, 2023 | Jul 24, 2022 |
| Suse | — | Upgrade gdk-pixbuf-query-loaders-32bitUpgrade gdk-pixbuf-develUpgrade gdk-pixbuf-langUpgrade libgdk_pixbuf-2_0-0Upgrade gdk-pixbuf-query-loadersUpgrade gdk-pixbuf-thumbnailerUpgrade gdk-pixbuf-devel-32bitUpgrade libgdk_pixbuf-2_0-0-32bitUpgrade typelib-1_0-gdkpixdata-2_0Upgrade typelib-1_0-gdkpixbuf-2_0 | Oct 26, 2022 | Jul 24, 2022 |
| Ubuntu | — | Upgrade libgdk-pixbuf2.0-0 | Aug 9, 2022 | Jul 24, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub