Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h3qh-mvr3-r7x7

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.

EPSS

Процентиль: 4%
0.00021
Низкий

3.3 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 3.3
ubuntu
около 2 месяцев назад

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.

CVSS3: 3.3
redhat
около 2 месяцев назад

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.

CVSS3: 3.3
nvd
около 2 месяцев назад

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.

CVSS3: 3.3
msrc
24 дня назад

Описание отсутствует

CVSS3: 3.3
debian
около 2 месяцев назад

A flaw was found in the GIF parser of GdkPixbuf\u2019s LZW decoder. Wh ...

EPSS

Процентиль: 4%
0.00021
Низкий

3.3 Low

CVSS3

Дефекты

CWE-200