CVE:CVE-2022-28506
CNNVD:CNNVD-202204-4321
GIFLIB是一款用于读取和编辑gif图像的库。
GIFLIB 5.2.1 版本存在安全漏洞，该漏洞源于gif2rgb.c的DumpScreen2RGB()函数存在基于堆的缓冲区溢出。
solution:Upgrade giflib_project giflib to a higher version than 5.2.1,and avoid the version 5.2.1; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36