Approved changes feed: RSS · Atom

cpe:2.3:a:android-gif-drawable_project:android-gif-drawable:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAndroid Gif Drawable Project (f7d39b58-03ee-5bc4-bc70-5190e22c229a)
ProductAndroid Gif Drawable (b35b0116-d970-5d78-a240-733a503bfa0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/koral--/android-gif-drawable purl2cpe 2026-06-01 10:13:29.390924
pkg:maven/pl.droidsonroids.gif/android-gif-drawable purl2cpe 2026-06-01 10:13:29.390926

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23435 vulnerable 2026-06-08 05:40:57.073510 Details available
decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.
Published: 2022-01-19T00:26:04.000Z
Updated: 2024-08-03T03:43:45.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11932 vulnerable 2026-06-08 05:12:38.316828 Details available
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.
Published: 2019-10-03T21:13:47.000Z
Updated: 2024-08-04T23:10:29.690Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.