Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[GHSA-x534-j49x-mqvj] A double free vulnerability in the DDGifSlurp function in... #5162

Closed
wants to merge 1 commit into from
Closed

[GHSA-x534-j49x-mqvj] A double free vulnerability in the DDGifSlurp function in... #5162

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 32 additions & 4 deletions advisories/unreviewed/2022/05/GHSA-x534-j49x-mqvj/GHSA-x534-j49x-mqvj.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,19 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x534-j49x-mqvj",
"modified": "2023-03-01T18:30:58Z",
"modified": "2023-03-09T05:05:46Z",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure why this modified value changed, and why it uses a date from 2023. I just copied this from #5161 where it was automatically changed like this.

"published": "2022-05-24T16:57:50Z",
"aliases": [
"CVE-2019-11932"
],
"details": "A double free vulnerability in the DDGifSlurp function in decoding.c in libpl_droidsonroids_gif before 1.2.15, as used in WhatsApp for Android before 2.19.244, allows remote attackers to execute arbitrary code or cause a denial of service.",
"summary": "Double free in android-gif-drawable",
"details": "A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.",
Comment on lines -9 to +10
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

General question: Are changes from NVD not synced back here? According to https://nvd.nist.gov/vuln/detail/cve-2019-11932#VulnChangeHistorySection this change already happened in 2019.

(Though the NVD entry has some issues, it contains multiple duplicate reference links.)

"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "pl.droidsonroids.gif:android-gif-drawable"
Copy link
Contributor Author

@Marcono1234 Marcono1234 Jan 11, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this enough for Dependabot to notice this, and for it to be synced to https://osv.dev/vulnerability/CVE-2019-11932?

If not, could you please review this advisory so it goes from "unreviewed" to "github-reviewed"?
According to the presentation https://media.ccc.de/v/38c3-ultrawide-archaeology-on-android-native-libraries#t=1244 a lot of Android apps might still be using vulnerable versions.
Though maybe should be done together with #5164 then so users directly update to >= 1.2.24.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and for it to be synced to https://osv.dev/vulnerability/CVE-2019-11932

Probably has no effect on osv.dev unfortunately, see google/osv.dev#3049.

},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.18"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "< 1.2.18"
}
}
],
"references": [
{
"type": "ADVISORY",
Expand All @@ -39,6 +63,10 @@
"type": "WEB",
"url": "https://gist.github.com/wdormann/874198c1bd29c7dd2157d9fc1d858263"
},
{
"type": "PACKAGE",
"url": "https://github.com/koral--/android-gif-drawable"
},
{
"type": "WEB",
"url": "https://www.facebook.com/security/advisories/cve-2019-11932"
Expand All @@ -65,4 +93,4 @@
"github_reviewed_at": null,
"nvd_published_at": "2019-10-03T22:15:00Z"
}
}
}
Loading