Read the docs
TI-2022-24154 Aliases CVE-2022-48622GHSA-2pj9-xmx5-6fv3

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor)…

Priority HIGH 69CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 4 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00415 36th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 2 advisoriesRed Hat: 4 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:gnome:gdkpixbuf:*:*:*:*:*:*:*:*up to 2.42.10VulnerableGNOME
  • cpe:2.3:a:gnome:gdkpixbuf:*:*:*:*:*:*:*:* Versions up to 2.42.10 Vulnerable ·GNOME

Remediation

Red Hat 2 advisories

  • RHSA-2024:3834 Released 2024-06-11 · Red Hat rating Moderate
    gdk-pixbuf2 security update
    • Red Hat Enterprise Linux AppStream (v. 9) gdk-pixbuf2-2.42.6-4.el9_4, gdk-pixbuf2-devel-2.42.6-4.el9_4, gdk-pixbuf2-modules-2.42.6-4.el9_4
  • RHSA-2024:3341 Released 2024-05-23 · Red Hat rating Moderate
    gdk-pixbuf2 security update
    • Red Hat Enterprise Linux AppStream (v. 8) gdk-pixbuf2-devel-2.36.12-6.el8_10, gdk-pixbuf2-modules-2.36.12-6.el8_10
    • Red Hat Enterprise Linux BaseOS (v. 8) gdk-pixbuf2-2.36.12-6.el8_10
    • Red Hat Enterprise Linux CRB (v. 8) gdk-pixbuf2-xlib-2.36.12-6.el8_10, gdk-pixbuf2-xlib-devel-2.36.12-6.el8_10

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:3341
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:3834
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:3341
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2024:3341

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-48622
  2. 2026-10-03 Alias added: GHSA-2pj9-xmx5-6fv3

References

Exploit 1

  • TI-2004-00721 Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for… CVSS 2.0HIGH 7.5
  • TI-2004-00720 Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+… CVSS 2.0HIGH 7.5
  • TI-2021-20185 GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when… CVSS 3.1HIGH 8.8
  • TI-2005-03013 Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows… CVSS 2.0HIGH 7.5
  • TI-2005-02808 Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers… CVSS 2.0HIGH 7.5
  • TI-2005-02807 io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows… CVSS 2.0HIGH 7.8
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences