Denial of Service Vulnerability in Android GIF Drawable by Koral

CVE-2022-23435

Summary

The Android GIF Drawable library prior to version 1.2.24 is susceptible to a denial of service due to insufficient validation of comment length in its decoding process. This vulnerability allows an attacker to exploit the library by providing excessively long comments, which can cause the application utilizing this library to become unresponsive. Users of affected versions should update to version 1.2.24 or later to mitigate this issue. For more details, refer to the upstream commits and compare the vulnerable versions at the provided GitHub links.

References