Improper resource allocation - Buffer overflow In gtk+2.0
Description
io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 2.21.5-1 | ||
debian 11 | 2.32.0-1 | ||
debian 13 | 2.21.5-1 | ||
debian 11 | 2.21.5-1 | ||
debian 13 | 2.32.0-1 | ||
debian 14 | 2.32.0-1 | ||
debian 12 | 2.32.0-1 | ||
debian 14 | 2.21.5-1 | ||
 rpm rhel7 | - | - | |
rpm rhel5 | - | - |
Aliases
1. 2. 3. 4. 5.