← All advisories

High severity7.5NVD Advisory· Published Jan 19, 2022· Updated Jun 17, 2026

CVE-2022-23435

CVE-2022-23435

Description

decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
pl.droidsonroids.gif:android-gif-drawableMaven	< 1.2.24	1.2.24

Affected products

2

android-gif-drawable/android-gif-drawabledescription
ghsa-coords
pkg:maven/pl.droidsonroids.gif/android-gif-drawable
Range: < 1.2.24

Patches

Vulnerability mechanics

References

5

github.com/koral--/android-gif-drawable/commit/9f0f0c89e6fa38548163771feeb4bde84b828887nvdPatchThird Party AdvisoryWEB
github.com/koral--/android-gif-drawable/compare/v1.2.23...v1.2.24nvdPatchRelease NotesThird Party AdvisoryWEB
github.com/advisories/GHSA-3mm4-w7v6-4rhvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-23435ghsaADVISORY
github.com/koral--/android-gif-drawable/issues/792ghsaWEB

News mentions

0

No linked articles in our index yet.