VDB
CVE-2022-23435
CVE-2022-23435
PUBLISHED
CVSS 5 MEDIUM
android-gif-drawable vulerable to denial of service due to unrestricted comment length
EPSS 1.19% · 66.6th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
1.19%
66.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Maven | pl.droidsonroids.gif:android-gif-drawable | 0 |
| android-gif-drawable_project | android-gif-drawable | 0 |
| n/a | n/a | n/a |
Timeline
- Jan 19, 2022 CVE Published
- Feb 8, 2022 EPSS Score
- Apr 2, 2022 EPSS Score
- May 25, 2022 EPSS Score
- Jul 18, 2022 EPSS Score
- Sep 8, 2022 EPSS Score
- Oct 31, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 31, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
References
- https://github.com/koral--/android-gif-drawable/commit/9f0f0c89e6fa38548163771feeb4bde84b828887 url
- https://github.com/koral--/android-gif-drawable/compare/v1.2.23...v1.2.24 url
- https://nvd.nist.gov/vuln/detail/CVE-2022-23435 advisory
- https://github.com/koral--/android-gif-drawable/issues/792#issuecomment-1048850678 url
- https://github.com/koral--/android-gif-drawable package