CVE-2021-46829: Integer Overflow
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability CVE-2021-46829?
CVE-2021-46829 is a heap-based buffer overflow vulnerability in GNOME GdkPixbuf before version 2.42.8, which can be abused for code execution.
How does the vulnerability CVE-2021-46829 occur?
The vulnerability occurs when compositing or clearing frames in GIF files using GdkPixbuf in GNOME.
What is the severity of CVE-2021-46829?
The severity of CVE-2021-46829 is high, with a CVSS score of 7.8.
Which systems are affected by CVE-2021-46829?
GNOME GdkPixbuf versions before 2.42.8 are affected, as well as Fedora 35 and Debian Linux 11.0.
How can CVE-2021-46829 be fixed?
To fix CVE-2021-46829, users should update to GDK-PixBuf version 2.42.8 or later.