Giflib 安全漏洞

Giflib is an open-source library and utility for processing GIFs in OpenEuler. Version 5.2.2 of giflib contains a security vulnerability. This vulnerability arises from EGifGCBToExtension failing to validate the allocated size when overriding existing graphic control extension blocks, which may...

CVE-2026-26740

giflib 5.2.2 is affected by a Buffer Overflow in the EGifGCBToExtension path, which overwrites an existing Graphic Control Extension block without validating the allocated size. This can lead to a denial of service. The available sources confirm the vulnerability exists in the giflib 5.2.2 releas...

CVE-2026-26740

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...

CVE-2026-26740

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...

CVE-2026-26740

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...

giflib -- Buffer Overflow vulnerability

https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflibgiftoolgcelenheapoobwritedisclosure.md reports: Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-23868)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-23868 advisory. - Giflib contains a double-free vulnerability that is the result of a shallow copy in...

giflib-devel-32bit-5.2.2-3.1 on GA media (moderate)

giflib-devel-32bit-5.2.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:10326-1 Rating: moderate Cross-References: CVE-2026-23868 CVSS scores: CVE-2026-23868 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2026-23868 SUSE : 5.8...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2026-23868)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-23868 advisory. - Giflib contains a double-free vulnerability that is the result of a shallow copy in...

CVE-2026-23868 affecting package giflib for versions less than 5.2.1-11

CVE-2026-23868 affecting package giflib for versions less than 5.2.1-11. A patched version of the package is available...

CVE-2026-23868 affecting package giflib for versions less than 5.2.1-11

CVE-2026-23868 affecting package giflib for versions less than 5.2.1-11. A patched version of the package is available...

OPENSUSE-SU-2026:10326-1 giflib-devel-32bit-5.2.2-3.1 on GA media

These are all security issues fixed in the giflib-devel-32bit-5.2.2-3.1 package on the GA media of openSUSE Tumbleweed...

GHSA-PP67-VH85-488H vulnerabilities

Vulnerabilities for packages: giflib...

CVE-2024-45993 vulnerabilities

Vulnerabilities for packages: giflib...

GHSA-PP67-VH85-488H vulnerabilities

Vulnerabilities for packages: giflib...

CVE-2024-45993 vulnerabilities

Vulnerabilities for packages: giflib...

SUSE CVE-2026-23868

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible...

Linux Distros Unpatched Vulnerability : CVE-2026-23868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to...

EUVD-2026-10795

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible...

Double Free

Overview Affected versions of this package are vulnerable to Double Free due to a shallow copy in GifMakeSavedImage and improper error handling. An attacker can cause memory corruption or potentially execute arbitrary code by triggering a double-free condition. This is only exploitable if specifi...