CVE-2021-45972

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data.

CVSS v3.1 NVD

7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CVSS v2.0 NVD

5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.96% chance of exploitation in the next 30 days, 61st percentile

Published

2022-01-01

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002739

References

• CVE Record
• NVD entry