CVE-2021-45910

Katalog CVE

CVSS 7.8 · High EPSS 0,87%

Kerentanan Out-of-bounds Write pada gif2apng project gif2apng, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the allocated buffer. The attacker has control over a part of the address that data is written to, control over the written data, and (to some extent) control over the amount of data that is written.

Rincian

Terbit di NVD

28 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,87% peluang dieksploitasi; lebih tinggi dari 57,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002667 exploit · issue tracking · mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/03/msg00008.html mailing list · advisory pihak ketiga