CVE-2021-44648: Buffer Overflow
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-44648?
CVE-2021-44648 is a vulnerability in GNOME gdk-pixbuf 2.42.6 that allows for a heap-buffer overflow when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
What is the severity of CVE-2021-44648?
CVE-2021-44648 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2021-44648?
GNOME gdk-pixbuf 2.42.6, Fedoraproject Fedora 34 and 35, and Debian Debian Linux 11.0 are affected by CVE-2021-44648.
How can I fix CVE-2021-44648?
To fix CVE-2021-44648, update gdk-pixbuf to version 2.38.1+dfsg-1, 2.42.2+dfsg-1+deb11u1, or 2.42.10+dfsg-1.
Where can I find more information about CVE-2021-44648?
You can find more information about CVE-2021-44648 at the following references: [1] [2] [3].