The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain “Private->RunningCode - 2” array index is not checked. This will lead to a denial of service or possibly unspecified other impact.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | giflib | < 5.1.9-1 | giflib_5.1.9-1_all.deb |
Debian | 11 | all | giflib | < 5.1.9-1 | giflib_5.1.9-1_all.deb |
Debian | 10 | all | giflib | < 5.1.4-3+deb10u1 | giflib_5.1.4-3+deb10u1_all.deb |
Debian | 999 | all | giflib | < 5.1.9-1 | giflib_5.1.9-1_all.deb |
Debian | 13 | all | giflib | < 5.1.9-1 | giflib_5.1.9-1_all.deb |