CVE-2021-28676: Loop with Unreachable Exit Condition (Infinite Loop)

June 2, 2021 (updated December 22, 2023)

For FLI data, FliDecode does not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.

References

nvd.nist.gov/vuln/detail/CVE-2021-28676

Detect and mitigate CVE-2021-28676 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →