CVE-2021-45909: Debian Linux

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer.

Affected products

• Debian Debian Linux: version 9.0 only
• GIF2APNG Project GIF2APNG: version 1.9 only

Published 2021-12-28. Last modified 2026-06-17.