Vulnerability Details CVE-2021-20240
A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 8.3
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1926787
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5H3GNVWMZTYZR3JBYCK57PF7PFMQBNP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGZVCTH5O7WBJLYXZ2UOKLYNIFPVR55D/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EANWYODLOJDFLMBH6WEKJJMQ5PKLEWML/
- https://bugzilla.redhat.com/show_bug.cgi?id=1926787
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5H3GNVWMZTYZR3JBYCK57PF7PFMQBNP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGZVCTH5O7WBJLYXZ2UOKLYNIFPVR55D/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EANWYODLOJDFLMBH6WEKJJMQ5PKLEWML/
Products affected by CVE-2021-20240
-
cpe:2.3:a:gnome:gdk-pixbuf:-
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.10
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.11
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.20.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.20.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.22.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.22.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.24.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.24.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.25.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.25.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.34.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.10
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.11
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.12
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.37.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.37.92
-
cpe:2.3:a:gnome:gdk-pixbuf:2.38.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.38.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.38.2
-
cpe:2.3:o:fedoraproject:fedora:33
-
cpe:2.3:o:fedoraproject:fedora:34