CVE:CVE-2021-46829
CNNVD:CNNVD-202207-2319
GdkPixBuf是一款支持加载多种格式图像文件的库。
GNOME GdkPixBuf  2.42.8之前版本存在输入验证错误漏洞，该漏洞源于在合成或清除GIF文件中的帧时允许基于堆的缓冲区溢出，如io-gif-animation.c composite_frame所示，这种溢出是可控的，尤其是在 32 位系统上可能会被滥用于代码执行。
solution:Upgrade gnome gdk-pixbuf to a higher version than 2.42.8,and avoid the version (,2.42.8); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0