Heap-based Buffer Overflow in GDK-PixBuf Affects GNOME Software

CVE-2021-46829

Summary

GDK-PixBuf versions earlier than 2.42.8 are susceptible to a heap-based buffer overflow, which can occur during the compositing or clearing of frames in GIF files. This flaw could potentially be exploited for arbitrary code execution, particularly on 32-bit systems. As users interact with GIF animations, an attacker may craft a malicious GIF that triggers the overflow, leading to compromised system security.

References