CVE-2021-46829: Debian Linux

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.

Affected products

• Debian Debian Linux: version 11.0 only
• Fedoraproject Fedora: version 35 only
• Gnome Gdk-Pixbuf: before 2.42.8 (fixed in 2.42.8)

Published 2022-07-24. Last modified 2026-06-17.