GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-44648 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44648 http://www.cvedetails.com/cve/CVE-2021-44648/ https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/136 https://sahildhar.github.io/blogpost/GdkPixbuf-Heap-Buffer-Overflow-in-lzwdecodernew/