Lucene search
GoogleOSV:CVE-2022-28506HistoryApr 25, 2022 - 1:15 p.m.
CVE-2022-28506
2022-04-2513:15:49
Google
osv.dev
17
heap-buffer-overflow
giflib
function vulnerability
EPSS
0.001
Percentile
44.4%
There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.
References
github.com/verf1sh/Poc/blob/master/asan_report_giflib.png
github.com/verf1sh/Poc/blob/master/giflib_poc
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4CJSHXBD2RS5OJNWSHQZVMTQCCTIPYS/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEAFUZXOOJJVFYRQM6IIJ7LMLEKCCESG/
sourceforge.net/p/giflib/bugs/159/
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0275)
2022-08-08 00:00:00
Huawei EulerOS: Security Advisory for giflib (EulerOS-SA-2022-2285)
2022-09-14 00:00:00
Huawei EulerOS: Security Advisory for giflib (EulerOS-SA-2022-2458)
2022-10-10 00:00:00
debiancve
debiancve
CVE-2022-28506
2022-04-25 13:15:49
redhatcve
redhatcve
CVE-2022-28506
2022-04-26 06:55:02
fedora
fedora
[SECURITY] Fedora 36 Update: giflib-5.2.1-14.fc36
2022-07-25 01:23:09
[SECURITY] Fedora 35 Update: mingw-giflib-5.2.1-7.fc35
2022-08-06 01:41:23
[SECURITY] Fedora 35 Update: giflib-5.2.1-9.fc35
2022-08-06 01:41:23
nvd
nvd
CVE-2022-28506
2022-04-25 13:15:49
mageia
mageia
Updated mingw-giflib packages fix security vulnerability
2022-08-06 00:00:44
alpinelinux
alpinelinux
CVE-2022-28506
2022-04-25 13:15:49
nessus
nessus
EulerOS 2.0 SP8 : giflib (EulerOS-SA-2022-2458)
2022-10-09 00:00:00
EulerOS 2.0 SP9 : giflib (EulerOS-SA-2022-2314)
2022-09-14 00:00:00
EulerOS 2.0 SP3 : giflib (EulerOS-SA-2022-2606)
2022-10-27 00:00:00
ubuntucve
ubuntucve
CVE-2022-28506
2022-04-25 00:00:00
cvelist
cvelist
CVE-2022-28506
2022-04-25 12:53:01
cbl_mariner
cbl_mariner
CVE-2022-28506 affecting package giflib 5.2.1-5
2024-08-04 21:09:48
CVE-2022-28506 affecting package giflib 5.2.1-6
2024-08-04 21:09:48
prion
prion
Heap overflow
2022-04-25 13:15:00
gitlab
gitlab
Out-of-bounds Write
2022-04-25 00:00:00
veracode
veracode
Buffer Overflow
2022-11-03 12:08:00
cve
cve
CVE-2022-28506
2022-04-25 13:15:49
osv
osv
CGA-grwf-fxvc-rrc2
2024-06-06 12:27:32
giflib vulnerabilities
2024-06-10 14:27:14
redos
redos
ROS-20230918-01
2023-09-18 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2434
2024-06-17 09:09:07
ubuntu
ubuntu
GIFLIB vulnerabilities
2024-06-10 00:00:00