CVE-2021-45908

An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted.

• CWE-787

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002669Exploit, Issue Tracking, Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002669Exploit, Issue Tracking, Mailing List, Third Party Advisory

Published

Dec 28, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45901The password-reset form in ServiceNow Orlando provides diffe…5.3
• CVE-2021-45903A persistent cross-site scripting (XSS) issue in the web int…6.1
• CVE-2021-45904OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name sc…5.4
• CVE-2021-45905OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen…5.4
• CVE-2021-45906OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen.5.4
• CVE-2021-45907An issue was discovered in gif2apng 1.9. There is a stack-ba…7.8
• CVE-2021-45909An issue was discovered in gif2apng 1.9. There is a heap-bas…7.8
• CVE-2021-45910An issue was discovered in gif2apng 1.9. There is a heap-bas…7.8
• CVE-2021-45911An issue was discovered in gif2apng 1.9. There is a heap-bas…7.8
• CVE-2021-45912An unauthenticated Named Pipe channel in Controlup Real-Time…7.8
• CVE-2021-45913A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) b…7.2
• CVE-2021-45914In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthentica…9.8