Описание
android-gif-drawable vulerable to denial of service due to unrestricted comment length
decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.
Ссылки
Пакеты
Наименование
pl.droidsonroids.gif:android-gif-drawable
maven
Затронутые версииВерсия исправления
< 1.2.24
1.2.24
Связанные уязвимости
CVSS3: 7.5
nvd
около 4 лет назад
decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.