CVE-2025-6199

Name of the Vulnerable Software and Affected Versions GdkPixbuf versions prior to 2.42.10+dfsg-1+deb12u2

Description A flaw exists in the GIF parser of the LZW decoder. When an invalid symbol is encountered during decompression, the decoder incorrectly sets the reported output size to the full buffer length instead of the actual number of bytes written. This logic error allows uninitialized sections of the buffer to be included in the output, which can lead to the disclosure of arbitrary memory contents within the processed image.

Recommendations Update to version 2.42.10+dfsg-1+deb12u2.