An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside the boundaries of the buffer.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002687 | issue tracking mailing list exploit third party advisory |
https://lists.debian.org/debian-lts-announce/2022/03/msg00008.html | third party advisory mailing list |