CVE-2018-11489

The DGifDecompressLine function in dgiflib.c in GIFLIB possibly version 3.0.x, as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact...

CVE-2018-11489

The CVE-2018-11489 entry describes a heap-based buffer overflow in GIFLIB’s DGifDecompressLine (dgif_lib.c) and, later, in sam2p’s cgif.c (sam2p 0.49.4). The vulnerability arises because a CrntCode array index is not checked, enabling a heap overflow that can lead to denial of service or potentia...