VDB

DEBIAN-CVE-2021-46829

DEBIAN-CVE-2021-46829 PUBLISHED CVSS 7.800000190734863 HIGH

GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:14gdk-pixbuf0
Debian:12gdk-pixbuf0
Debian:13gdk-pixbuf0

Timeline

  • Jul 24, 2022 CVE Published
  • Oct 23, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›