Summary
Pedro Ribeiro discovered that the GDK-PixBuf library did not properly
handle certain GIF images. If an user or automated system were tricked into
opening a specially crafted GIF file, a remote attacker could use this flaw
to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.3 |
Vulnerabilities 1
-
Unscored —
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames …
References
-
report
https://ubuntu.com/security/CVE-2021-46829