pl.droidsonroids.gif:android-gif-drawable (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package pl.droidsonroids.gif:android-gif-drawable, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2019-11932 — CVSS 8.8 (high): A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in…
• CVE-2022-23435 — CVSS 7.5 (high): decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.