CVE-2021-44648

Name of the Vulnerable Software and Affected Versions GNOME gdk-pixbuf version 2.42.6

Description The issue is related to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12. This vulnerability can allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service using a specially crafted GIF file.

Recommendations For GNOME gdk-pixbuf version 2.42.6, consider updating to a newer version that contains a fix for this issue. As a temporary workaround, avoid using the gdk-pixbuf library to decode GIF files with lzw minimum code size equals to 12 until a patch is available. Restrict access to GIF files to minimize the risk of exploitation.