CVE-2022-23435

HIGH

Android-gif-drawable < 1.2.24 - Denial of Service

Title source: rule

decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.

Core 2

Core References

Patch, Third Party Advisory x_refsource_misc

Patch, Release Notes, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0033

EPSS Percentile 56.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Status published

Products (2)

android-gif-drawable_project/android-gif-drawable < 1.2.24

pl.droidsonroids.gif/android-gif-drawable 0 - 1.2.24Maven

Published Jan 19, 2022

Tracked Since Feb 18, 2026