Bug 807058 (CVE-2021-38115)

Summary:	<media-libs/gd-2.3.3: OOB read (CVE-2021-38115)
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	minor	CC:	codec
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/libgd/libgd/issues/697
Whiteboard:	B3 [noglsa cleanup]
Package list:		Runtime testing required:	---
Bug Depends on:	858275
Bug Blocks:

Description John Helmert III archtester

2021-08-07 22:47:01 UTC

CVE-2021-38115:

read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.

Unreleased patch: https://github.com/libgd/libgd/commit/edaf39fe6fb0d1867b9b5992efb9fe4102138553

Comment 1 Federico Justus Denkena 2022-07-15 17:04:58 UTC

Fixed in commit https://github.com/libgd/libgd/commit/edaf39fe6fb0d1867b9b5992efb9fe4102138553 (as linked before), commit went into release 2.3.3 (https://github.com/libgd/libgd/releases/tag/gd-2.3.3)).
There is still version 2.3.2 left in tree and marked as stable while 2.3.3 is unstable. I'd recommend cleanup and security stabilisation of 2.3.3 once someone from the codec project confirms this.

Comment 2 John Helmert III archtester

2022-07-29 16:54:06 UTC

OOB read is low impact, no GLSA. Please cleanup.