Unrated severityNVD Advisory· Published Jan 12, 2022· Updated Aug 4, 2024
CVE-2021-44648
CVE-2021-44648
Description
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22- GNOME/gdk-pixbufdescription
- Range: = 2.42.6
- osv-coords20 versionspkg:rpm/almalinux/gdk-pixbuf2pkg:rpm/almalinux/gdk-pixbuf2-develpkg:rpm/almalinux/gdk-pixbuf2-modulespkg:rpm/opensuse/gdk-pixbuf&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/gdk-pixbuf&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/gdk-pixbuf&distro=openSUSE%20Leap%20Micro%205.2pkg:rpm/opensuse/gdk-pixbuf&distro=openSUSE%20Tumbleweedpkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3pkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/gdk-pixbuf&distro=SUSE%20Manager%20Server%204.1
< 2.42.6-3.el9+ 19 more
- (no CPE)range: < 2.42.6-3.el9
- (no CPE)range: < 2.42.6-3.el9
- (no CPE)range: < 2.42.6-3.el9
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.42.9-150400.5.6.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.42.9-3.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.42.9-150400.5.6.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
- (no CPE)range: < 2.40.0-150200.3.9.1
Patches
Vulnerability mechanics
References
5- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEVTOGIJITK2N5AOOLKKMDIICZDQE6CH/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEKBMOO52RXONWKB6ZKKHTVPLF6WC3KF/mitrevendor-advisoryx_refsource_FEDORA
- www.debian.org/security/2022/dsa-5228mitrevendor-advisoryx_refsource_DEBIAN
- gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/136mitrex_refsource_MISC
- sahildhar.github.io/blogpost/GdkPixbuf-Heap-Buffer-Overflow-in-lzw_decoder_new/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.