{"id":"CVE-2021-46829","aliases":["ALSA-2023:2216","BELL-CVE-2021-46829","DEBIAN-CVE-2021-46829","DSA-5228-1","EUVD-2021-33484","GHSA-xq3g-5rhc-pxgj","MGASA-2022-0269","OESA-2022-1873","OESA-2022-1874","RHSA-2023:2216","SUSE-SU-2022:2995-1","SUSE-SU-2022:2996-1","UBUNTU-CVE-2021-46829","USN-5554-1","openSUSE-SU-2024:12222-1"],"status":"published","title":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...","description":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00801,"percentile":0.57051,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190","CWE-787"],"published":"2022-07-24T18:47:35Z","modified":"2026-11-04T10:45:08Z","fixes":[{"ecosystem":"Debian:12","package":"gdk-pixbuf","fixed_in":["2.42.8+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gdk-pixbuf","fixed_in":["2.42.8+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gdk-pixbuf","fixed_in":["2.42.8+dfsg-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"gdk-pixbuf2.0","fixed_in":["2.42.2-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"gdk-pixbuf2","fixed_in":["2.40.0-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"gdk-pixbuf2","fixed_in":["2.42.6-4.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"gdk-pixbuf","fixed_in":["2.42.8-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"gdk-pixbuf","fixed_in":["2.42.8-150400.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gdk-pixbuf","fixed_in":["2.40.0-150200.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"gdk-pixbuf","fixed_in":["2.40.0-150200.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gdk-pixbuf","fixed_in":["2.40.0-150200.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"gdk-pixbuf","fixed_in":["2.40.0-150200.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"gdk-pixbuf","fixed_in":["2.40.0-150200.3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gdk-pixbuf","fixed_in":["2.40.0+dfsg-3ubuntu0.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gdk-pixbuf","fixed_in":["2.42.8-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gdk-pixbuf2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gdk-pixbuf2-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.8+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.8+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.8+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.2+dfsg-1+deb11u1"}]}],"versions":["2.42.2+dfsg-1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"gdk-pixbuf2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.2-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.6-4.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdk-pixbuf2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdk-pixbuf2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdk-pixbuf2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdk-pixbuf2-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdk-pixbuf2-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdk-pixbuf2-modules-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdk-pixbuf2-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.6-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.8-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.8-150400.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0+dfsg-3ubuntu0.3"}]}],"versions":["2.40.0+dfsg-1build1","2.40.0+dfsg-1ubuntu1","2.40.0+dfsg-2","2.40.0+dfsg-3","2.40.0+dfsg-3ubuntu0.1","2.40.0+dfsg-3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0+dfsg-3ubuntu0.3"}]}],"versions":["2.40.0+dfsg-1build1","2.40.0+dfsg-1ubuntu1","2.40.0+dfsg-2","2.40.0+dfsg-3","2.40.0+dfsg-3ubuntu0.1","2.40.0+dfsg-3ubuntu0.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.8-2.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnome","product":"gdk-pixbuf"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/190","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/merge_requests/121","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/bca00032ad68d0b0aa2c1f7558db931e52bd9cd2","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/5398f04d772f7f8baf5265715696ed88db0f0512","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.openwall.com/lists/oss-security/2022/07/23/1","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2022/07/25/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://github.com/pedrib/PoC/blob/master/fuzzing/CVE-2021-46829/CVE-2021-46829.md","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5IHHEYFD6GDZVALKIPPRD2U4JNZUZWR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2022/dsa-5228","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46829","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M5IHHEYFD6GDZVALKIPPRD2U4JNZUZWR/"},{"url":"https://github.com/advisories/GHSA-xq3g-5rhc-pxgj"},{"url":"https://access.redhat.com/errata/RHSA-2023:2216","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44648","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46829","tags":["report"]},{"url":"https://bugzilla.redhat.com/2043722","tags":["report"]},{"url":"https://bugzilla.redhat.com/2114940","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2216.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-46829","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-46829","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0269.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30662","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/07/25/1","tags":["web","report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1873","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1874","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2114940","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2216.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44648","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46829","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222995-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201826","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46829","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222996-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-46829","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5554-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-46829","description":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.","status":"published","published":"2022-07-24T18:47:35Z","modified":"2024-08-04T05:17:42.63Z","updated_at":"2026-11-02T14:33:02.930115Z"}],"euvd":[{"id":"EUVD-2021-33484","description":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.","status":"published","published":"2022-07-24T18:47:35Z","modified":"2024-08-04T05:17:42Z","updated_at":"2026-11-03T03:08:22.448202Z"}],"ghsa":[{"id":"GHSA-xq3g-5rhc-pxgj","title":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...","description":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.","status":"published","published":"2022-07-25T00:00:31Z","modified":"2023-01-30T05:06:06Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:47:25.356505Z"}],"nvd":[{"id":"CVE-2021-46829","description":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.","status":"published","published":"2022-07-24T19:15:10.097Z","modified":"2026-06-17T04:15:37.84Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:06.501652Z"}],"osv":[{"id":"BELL-CVE-2021-46829","title":"CVE-2021-46829 does not affect BellSoft software","status":"withdrawn","published":"2022-07-24T19:15:00Z","modified":"2026-01-26T09:49:02.922303Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-46829","description":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.","status":"published","published":"2022-07-24T19:15:10.097Z","modified":"2026-11-04T10:45:08.12194435Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T11:07:20.833685Z"},{"id":"DEBIAN-CVE-2021-46829","description":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.","status":"published","published":"2022-07-24T19:15:10.097Z","modified":"2026-10-23T18:04:00.990336523Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2022-1873","title":"gdk-pixbuf2 security update","description":"gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.(CVE-2021-46829)","status":"published","published":"2022-09-01T11:05:08Z","modified":"2026-08-18T01:17:16.820338255Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1874","title":"gdk-pixbuf2 security update","description":"gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.(CVE-2021-46829)","status":"published","published":"2022-09-01T11:05:09Z","modified":"2026-08-18T01:17:17.085021245Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2023:2216","title":"Red Hat Security Advisory: gdk-pixbuf2 security update","status":"published","published":"2024-09-16T09:32:53Z","modified":"2025-11-22T12:49:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2021-46829","description":"GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.","status":"published","published":"2022-07-24T19:15:00Z","modified":"2026-04-22T13:05:06.158594Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"ALSA-2023:2216","title":"Moderate: gdk-pixbuf2 security update","description":"The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.\n\nSecurity Fix(es):\n\n* gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data (CVE-2021-44648)\n* gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files (CVE-2021-46829)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:54.313311445Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DSA-5228-1","title":"gdk-pixbuf - security update","status":"published","published":"2022-09-11T00:00:00Z","modified":"2026-03-09T02:10:17.064258Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0269","title":"Updated gdk-pixbuf2.0 packages fix security vulnerability","description":"It was discovered that gdk-pixbuf contained a buffer overwrite in    \nio-gif-animation.c composite_frame() exploitable using a crafted GIF\n(CVE-2021-46829).\n","status":"published","published":"2022-07-29T20:53:30Z","modified":"2026-04-16T04:43:37.178134651Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12222-1","title":"gdk-pixbuf-devel-2.42.8-2.1 on GA media","description":"These are all security issues fixed in the gdk-pixbuf-devel-2.42.8-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:50:26.813489Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2995-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\nUpdate to version 2.42.8, including the following:\n\n- CVE-2021-46829: Fixed a heap-based buffer overflow when compositing or clearing frames in GIF files (bsc#1201826).\n","status":"published","published":"2022-09-02T10:12:29Z","modified":"2026-02-04T02:37:16.004424Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2996-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\n- CVE-2021-46829: Fixed overflow when compositing or clearing frames (bsc#1201826).\n","status":"published","published":"2022-09-02T10:12:53Z","modified":"2026-02-04T04:37:59.014684Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5554-1","title":"gdk-pixbuf vulnerability","description":"Pedro Ribeiro discovered that the GDK-PixBuf library did not properly\nhandle certain GIF images. If an user or automated system were tricked into\nopening a specially crafted GIF file, a remote attacker could use this flaw\nto cause GDK-PixBuf to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2022-08-08T11:44:32Z","modified":"2026-04-22T10:26:26.424053Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}