GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2 | May 15, 2023 | Jul 24, 2022 |
| Amazon_linux_2023 | — | Upgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-tests-debuginfo | Feb 17, 2025 | Jul 24, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 24, 2022 |
| Centos_linux | — | Upgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-debugsource | May 15, 2023 | Jul 24, 2022 |
| Debian | — | Upgrade gdk-pixbuf | Nov 4, 2022 | Jul 24, 2022 |
| Oracle_linux | — | Upgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-devel | May 17, 2023 | Jul 24, 2022 |
| Redhat_linux | — | Upgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-debugsource | May 15, 2023 | Jul 24, 2022 |
| Suse | — | Upgrade typelib-1_0-gdkpixdata-2_0Upgrade gdk-pixbuf-devel-32bitUpgrade libgdk_pixbuf-2_0-0-32bitUpgrade typelib-1_0-gdkpixbuf-2_0Upgrade gdk-pixbuf-thumbnailerUpgrade gdk-pixbuf-langUpgrade libgdk_pixbuf-2_0-0Upgrade gdk-pixbuf-query-loadersUpgrade gdk-pixbuf-query-loaders-32bitUpgrade gdk-pixbuf-devel | Oct 26, 2022 | Jul 24, 2022 |
| Ubuntu | — | Upgrade libgdk-pixbuf2.0-0 | Aug 9, 2022 | Jul 24, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub