An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the allocated buffer. The attacker has control over a part of the address that data is written to, control over the written data, and (to some extent) control over the amount of data that is written.
References
Link | Resource |
---|---|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002667 | Exploit Issue Tracking Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2022/03/msg00008.html | Mailing List Third Party Advisory |
Information
Published : 2021-12-27 17:15
Updated : 2022-03-24 08:52
NVD link : CVE-2021-45910
Mitre link : CVE-2021-45910
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
debian
- debian_linux
gif2apng_project
- gif2apng