Your submission was sent successfully! Close

CVE-2021-44648

Published: 12 January 2022

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

Priority

Medium

CVSS 3 base score: 8.8

Status

Package Release Status
gdk-pixbuf
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(code not present)
focal
Released (2.40.0+dfsg-3ubuntu0.4)
hirsute Ignored
(reached end-of-life)
impish Ignored
(reached end-of-life)
jammy
Released (2.42.8+dfsg-1ubuntu0.1)
kinetic Not vulnerable

trusty Does not exist

upstream Needed

xenial Not vulnerable
(code not present)
Patches:
upstream: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/8ad828c2782355c1747c62b3700bdc052e12e241