CVE-2022-23435: Android-Gif-Drawable Project Android-Gif-Drawable

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.

Affected products

• Android-Gif-Drawable Project Android-Gif-Drawable: before 1.2.24 (fixed in 1.2.24)

Published 2022-01-19. Last modified 2026-06-17.