An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer.
References
Link | Resource |
---|---|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002668 | Exploit Issue Tracking Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2022/03/msg00008.html | Mailing List Third Party Advisory |
Information
Published : 2021-12-27 17:15
Updated : 2022-04-06 07:22
NVD link : CVE-2021-45909
Mitre link : CVE-2021-45909
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
debian
- debian_linux
gif2apng_project
- gif2apng