CVE-2017-1000422

Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution

• CWE-190

• https://bugzilla.gnome.org/show_bug.cgi?id=785973Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/01/msg00007.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201804-14Third Party Advisory
• https://usn.ubuntu.com/3532-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4088Third Party Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=785973Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/01/msg00007.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201804-14Third Party Advisory
• https://usn.ubuntu.com/3532-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4088Third Party Advisory

Published

Jan 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000416axTLS version 1.5.3 has a coding error in the ASN.1 parser r…
• CVE-2017-1000417MatrixSSL version 3.7.2 adopts a collision-prone OID compari…
• CVE-2017-1000418The WildMidi_Open function in WildMIDI since commit d8a46682…
• CVE-2017-1000419phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avat…
• CVE-2017-1000420Syncthing version 0.14.33 and older is vulnerable to symlink…
• CVE-2017-1000421Gifsicle gifview 1.89 and older is vulnerable to a use-after…
• CVE-2017-1000423b2evolution version 6.6.0 - 6.8.10 is vulnerable to input va…
• CVE-2017-1000424Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is …
• CVE-2017-1000425Cross-site scripting (XSS) vulnerability in the /html/portal…
• CVE-2017-1000426MapProxy version 1.10.3 and older is vulnerable to a Cross S…6.1
• CVE-2017-1000427marked version 0.3.6 and earlier is vulnerable to an XSS att…
• CVE-2017-1000428flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_ma…