Summary
Pedro Ribeiro and Vitor Pedreira discovered that the GDK-PixBuf
library did not properly handle certain ANI files. An attacker
could use this flaw to cause GDK-PixBuf to crash, resulting in
a denial of service, or to possibly execute arbitrary code.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.5 |
| Ubuntu · 22.04 LTS 22.04:LTS | gdk-pixbuf | 2.42.8+dfsg-1ubuntu0.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | gdk-pixbuf | 2.42.10+dfsg-3ubuntu3.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gdk-pixbuf | 2.32.2-1ubuntu1.6+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gdk-pixbuf | 2.36.11-2ubuntu0.1~esm1 |
Vulnerabilities 1
-
High 7.8
In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory c…
References
-
report
https://ubuntu.com/security/CVE-2022-48622