Heap-Buffer Overflow Vulnerability in GNOME gdk-pixbuf 2.42.6 when Decoding LZW Compressed Stream in GIF Files

CVE-2021-44648 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

Learn more about our Web Application Penetration Testing UK.