Rinnegatamante lpp-vita Out-of-Bounds Read Vulnerability

An out-of-bounds read vulnerability has been identified in Rinnegatamante lpp-vita, affecting versions prior to lpp-vita r6. This vulnerability arises in the function read_image_data() within the file source/include/gifdec.c. The issue was introduced when the code was cloned from the original repository lecram/gifdec, which had received a security patch for the same vulnerability. However, the cloned version in lpp-vita did not incorporate this fix, leaving it susceptible to the out-of-bounds read issue.

Impact

Exploitation of this vulnerability could lead to an out-of-bounds read, potentially allowing for arbitrary memory access or information disclosure.

Remediation

Users can update to lpp-vita version r6 or later, where this vulnerability has been addressed.