CVE-2022-48622
Fixed in a distro release EPSS <1%CVSS 7.8
In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.
Products: gnome gdkpixbuf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | gdk-pixbuf2 | 2.36.12-6.el8_10 |
| AlmaLinux 8 | gdk-pixbuf2-devel | 2.36.12-6.el8_10 |
| AlmaLinux 8 | gdk-pixbuf2-modules | 2.36.12-6.el8_10 |
| AlmaLinux 8 | gdk-pixbuf2-xlib | 2.36.12-6.el8_10 |
| AlmaLinux 8 | gdk-pixbuf2-xlib-devel | 2.36.12-6.el8_10 |
| AlmaLinux 9 | gdk-pixbuf2 | 2.42.6-4.el9_4 |
| AlmaLinux 9 | gdk-pixbuf2-devel | 2.42.6-4.el9_4 |
| AlmaLinux 9 | gdk-pixbuf2-modules | 2.42.6-4.el9_4 |
| Alpine 3.17 | gdk-pixbuf | 2.42.12-r0 |
| Alpine 3.18 | gdk-pixbuf | 2.42.12-r0 |
| Alpine 3.19 | gdk-pixbuf | 2.42.12-r0 |
| Alpine 3.20 | gdk-pixbuf | 2.42.12-r0 |
| Alpine 3.21 | gdk-pixbuf | 2.42.12-r0 |
| Alpine 3.22 | gdk-pixbuf | 2.42.12-r0 |
| Alpine 3.23 | gdk-pixbuf | 2.42.12-r0 |
| Amazon Linux 2 | gdk-pixbuf2 | 2.36.12-3.amzn2.0.2 |
| Amazon Linux 2 | gdk-pixbuf2-devel | 2.36.12-3.amzn2.0.2 |
| Amazon Linux 2 | gdk-pixbuf2-tests | 2.36.12-3.amzn2.0.2 |
| Amazon Linux 2023 | gdk-pixbuf2 | 2.42.12-12.amzn2023 |
| Amazon Linux 2023 | gdk-pixbuf2 | 2.42.12-185.amzn2023 |
| Amazon Linux 2023 | gdk-pixbuf2-devel | 2.42.12-12.amzn2023 |
| Amazon Linux 2023 | gdk-pixbuf2-devel | 2.42.12-185.amzn2023 |
| Amazon Linux 2023 | gdk-pixbuf2-modules | 2.42.12-12.amzn2023 |
| Amazon Linux 2023 | gdk-pixbuf2-modules | 2.42.12-185.amzn2023 |
| Amazon Linux 2023 | gdk-pixbuf2-tests | 2.42.12-12.amzn2023 |
| Amazon Linux 2023 | gdk-pixbuf2-tests | 2.42.12-185.amzn2023 |
| Debian 12 | gdk-pixbuf | 2.42.10+dfsg-1+deb12u1 |
| Debian 13 | gdk-pixbuf | 2.42.12+dfsg-1 |
| Debian 14 | gdk-pixbuf | 2.42.12+dfsg-1 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2 | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-debuginfo | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-debugsource | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-devel | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-devel-debuginfo | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-modules | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-modules-debuginfo | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-tests-debuginfo | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-xlib | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-xlib-debuginfo | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 8 | gdk-pixbuf2-xlib-devel | 0:2.36.12-6.el8_10 |
| Red Hat Enterprise Linux 9 | gdk-pixbuf2 | 0:2.42.6-4.el9_4 |
| Red Hat Enterprise Linux 9 | gdk-pixbuf2-debuginfo | 0:2.42.6-4.el9_4 |
| Red Hat Enterprise Linux 9 | gdk-pixbuf2-debugsource | 0:2.42.6-4.el9_4 |
| Red Hat Enterprise Linux 9 | gdk-pixbuf2-devel | 0:2.42.6-4.el9_4 |
| Red Hat Enterprise Linux 9 | gdk-pixbuf2-devel-debuginfo | 0:2.42.6-4.el9_4 |
| Red Hat Enterprise Linux 9 | gdk-pixbuf2-modules | 0:2.42.6-4.el9_4 |
| Red Hat Enterprise Linux 9 | gdk-pixbuf2-modules-debuginfo | 0:2.42.6-4.el9_4 |
| Red Hat Enterprise Linux 9 | gdk-pixbuf2-tests-debuginfo | 0:2.42.6-4.el9_4 |
| Rocky Linux 8 | gdk-pixbuf2 | 0:2.36.12-6.el8_10 |
| Rocky Linux 9 | gdk-pixbuf2 | 0:2.42.6-4.el9_4 |
| SUSE Enterprise Storage 7.1 | gdk-pixbuf | 2.40.0-150200.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | gdk-pixbuf | 2.40.0-150200.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | gdk-pixbuf | 2.40.0-150200.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Linux Enterprise Micro 5.2 | gdk-pixbuf | 2.40.0-150200.3.12.1 |
| SUSE Linux Enterprise Micro 5.3 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Linux Enterprise Micro 5.4 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Linux Enterprise Micro 5.5 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | gdk-pixbuf | 2.42.12-150600.3.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | gdk-pixbuf | 2.34.0-19.20.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | gdk-pixbuf | 2.40.0-150200.3.12.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | gdk-pixbuf | 2.40.0-150200.3.12.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | gdk-pixbuf | 2.34.0-19.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | gdk-pixbuf | 2.40.0-150200.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | gdk-pixbuf | 2.40.0-150200.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | gdk-pixbuf | 2.34.0-19.20.1 |
| SUSE Linux Micro 6.0 | gdk-pixbuf | 2.42.12-1.1 |
| SUSE Manager Proxy 4.3 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| SUSE Manager Server 4.3 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| Ubuntu 20.04 LTS | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.5 |
| Ubuntu 22.04 LTS | gdk-pixbuf | 2.42.8+dfsg-1ubuntu0.3 |
| Ubuntu 24.04 LTS | gdk-pixbuf | 2.42.10+dfsg-3ubuntu3.1 |
| Ubuntu Pro 16.04 LTS | gdk-pixbuf | 2.32.2-1ubuntu1.6+esm1 |
| Ubuntu Pro 18.04 LTS | gdk-pixbuf | 2.36.11-2ubuntu0.1~esm1 |
| openSUSE Leap 15.5 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| openSUSE Leap 15.6 | gdk-pixbuf | 2.42.12-150600.3.3.1 |
| openSUSE Leap Micro 5.3 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| openSUSE Leap Micro 5.4 | gdk-pixbuf | 2.42.12-150400.5.9.1 |
| openSUSE Tumbleweed | gdk-pixbuf | 2.42.12-1.1 |