Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GdkPixBuf 输入验证错误漏洞
Vulnerability Description
GdkPixBuf是一款支持加载多种格式图像文件的库。 GNOME GdkPixBuf 2.42.8之前版本存在输入验证错误漏洞,该漏洞源于在合成或清除GIF文件中的帧时允许基于堆的缓冲区溢出,如io-gif-animation.c composite_frame所示,这种溢出是可控的,尤其是在 32 位系统上可能会被滥用于代码执行。
CVSS Information
N/A
Vulnerability Type
N/A