CVE-2021-46829
published 2022-07-24CVE-2021-46829: GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by…
PriorityP337high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.75%
50.2th percentile
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | gdk-pixbuf | < gdk-pixbuf 2.42.8+dfsg-1 (bookworm) | gdk-pixbuf 2.42.8+dfsg-1 (bookworm) |
| fedoraproject | fedora | — | — |
| gnome | gdk-pixbuf | < 2.42.8 | 2.42.8 |
| gnome | gdk-pixbuf | >= 0 < 2.42.2+dfsg-1+deb11u1 | 2.42.2+dfsg-1+deb11u1 |
| gnome | gdk-pixbuf | >= 0 < 2.42.8+dfsg-1 | 2.42.8+dfsg-1 |
| gnome | gdk-pixbuf | >= 0 < 2.42.8+dfsg-1 | 2.42.8+dfsg-1 |
| gnome | gdk-pixbuf | >= 0 < 2.42.8+dfsg-1 | 2.42.8+dfsg-1 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
GDK-PixBuf vulnerability
vendor_ubuntu·2022-08-08
CVE-2021-46829 GDK-PixBuf vulnerability
Title: GDK-PixBuf vulnerability
Summary: GDK-PixBuf could be made to crash or run programs as your login if it
opened a specially crafted file.
Pedro Ribeiro discovered that the GDK-PixBuf library did not properly
handle certain GIF images. If an user or automated system were tricked into
opening a specially crafted GIF file, a remote attacker could use this flaw
to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Instructions: After a standard system update you need to restart your session to make all
the necessary changes.
Red Hat
gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files
vendor_redhat·2022-07-24·CVSS 7.8
CVE-2021-46829 [HIGH] CWE-787 gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files
gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
A heap-based buffer overflow vulnerability was found in GNOME GdkPixbuf (aka GDK-PixBuf) when compositing or clearing frames in GIF files. The vulnerability exists due to a boundary error when processing GIF images. This flaw allows an attacker to create a specially crafted GIF image, trick the victim into opening it, triggering an out-of-bounds write, which allows executing arbitrary code on the target system or causi
Debian
CVE-2021-46829: gdk-pixbuf - GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overfl...
vendor_debian·2021·CVSS 7.8
CVE-2021-46829 [HIGH] CVE-2021-46829: gdk-pixbuf - GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overfl...
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
Scope: local
bookworm: resolved (fixed in 2.42.8+dfsg-1)
bullseye: resolved (fixed in 2.42.2+dfsg-1+deb11u1)
forky: resolved (fixed in 2.42.8+dfsg-1)
sid: resolved (fixed in 2.42.8+dfsg-1)
trixie: resolved (fixed in 2.42.8+dfsg-1)
GHSA
GHSA-xq3g-5rhc-pxgj: GNOME GdkPixbuf (aka GDK-PixBuf) before 2
ghsa_unreviewed·2022-07-25
CVE-2021-46829 [HIGH] CWE-787 GHSA-xq3g-5rhc-pxgj: GNOME GdkPixbuf (aka GDK-PixBuf) before 2
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
OSV
CVE-2021-46829: GNOME GdkPixbuf (aka GDK-PixBuf) before 2
osv·2022-07-24·CVSS 7.8
CVE-2021-46829 [HIGH] CVE-2021-46829: GNOME GdkPixbuf (aka GDK-PixBuf) before 2
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.openwall.com/lists/oss-security/2022/07/25/1https://github.com/pedrib/PoC/blob/master/fuzzing/CVE-2021-46829/CVE-2021-46829.mdhttps://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/5398f04d772f7f8baf5265715696ed88db0f0512https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/bca00032ad68d0b0aa2c1f7558db931e52bd9cd2https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/190https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/merge_requests/121https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5IHHEYFD6GDZVALKIPPRD2U4JNZUZWR/https://www.debian.org/security/2022/dsa-5228https://www.openwall.com/lists/oss-security/2022/07/23/1http://www.openwall.com/lists/oss-security/2022/07/25/1https://github.com/pedrib/PoC/blob/master/fuzzing/CVE-2021-46829/CVE-2021-46829.mdhttps://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/5398f04d772f7f8baf5265715696ed88db0f0512https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/bca00032ad68d0b0aa2c1f7558db931e52bd9cd2https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/190https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/merge_requests/121https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5IHHEYFD6GDZVALKIPPRD2U4JNZUZWR/https://www.debian.org/security/2022/dsa-5228https://www.openwall.com/lists/oss-security/2022/07/23/1
2022-07-24
Published