Skip to content
OpenAdvisories
High · 8.8 CVE-2024-49749 EUVD-2024-43650GHSA-6cvp-82cv-4v82

In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution wi…

Published Jan 21, 2025 · Updated Feb 26, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 15, 14, 13, 12L, 12 —

Advisories 3

References