En resumen
- CVE-2022-23435 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a pl.droidsonroids.gif:android-gif-drawable, android-gif-drawable (android-gif-drawable project).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 68.0% de las vulnerabilidades.
- Solución: actualizar a 1.2.24 o posterior.
Description
decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.
NVD description
decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.
Más vulnerabilidades de pl.droidsonroids.gif:android-gif-drawable
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free