Vulnerability CVE-2022-23435
Published: 2022-01-19

Description:
decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.

Type:

NVD-CWE-noinfo

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Android-gif-drawable project -> Android-gif-drawable 

 References:
https://github.com/koral--/android-gif-drawable/commit/9f0f0c89e6fa38548163771feeb4bde84b828887
https://github.com/koral--/android-gif-drawable/compare/v1.2.23...v1.2.24
Copyright 2024, cxsecurity.com

 

Back to Top