Updated libgd packages fix a security vulnerability

A vulnerability was discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed GIF file is processed...

[SECURITY] [DLA 4731-1] libgd2 security update

Debian LTS Advisory DLA-4731-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 11, 2026 https://wiki.debian.org/LTS Package : libgd2 Version : 2.3.0-2+deb11u2 2.3.3-9+deb12u1 CVE ID : CVE-2026-9672 Debian Bug : 1143152 A vulnerability was discovered in libgd...

EUVD-2003-0234

Malware in sbrugna...

EUVD-2010-0690

Malware in sbrugna...

EUVD-2006-3498

Malware in sbrugna...

EUVD-2018-11544

Malware in sbrugna...

GHSA-RXMQ-M78W-7WMC SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks

Impact A specially crafted GIF file containing a malformed comment extension block with a missing block terminator can cause the ImageSharp GIF decoder to enter an infinite loop while attempting to skip the block. This leads to a denial of service. Applications processing untrusted GIF input shou...

USN-6824-1 giflib vulnerabilities

It was discovered that GIFLIB incorrectly handled certain GIF files. An attacker could possibly use this issue to cause a denial of service. CVE-2021-40633, CVE-2022-28506, CVE-2023-39742...

Debian dla-3223 : giflib-tools - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3223 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3223-1 [email protected]...

MGASA-2019-0252 Updated giflib packages fix security vulnerability

Updated giflib packages fix security vulnerability: In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgiflib.c if the height field of the ImageSize data structure is equal to zero CVE-2019-15133...

CVE-2019-15133: Divide By Zero

In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgiflib.c if the height field of the ImageSize data structure is equal to zero...

qt5-qtbase: QImage allocation failure in qgifhandler

An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...

PT-2019-3240

Name of the Vulnerable Software and Affected Versions GIFLIB versions prior to 2019-02-16 Description The issue is related to errors in division by zero in the DGifSlurp function of the GIFLIB library, which handles GIF files. This can be triggered by a malformed GIF file where the height field o...

CVE-2018-19870: NULL Pointer Dereference

An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...

UBUNTU-CVE-2018-19870

An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...

PT-2018-2536

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.11.3 Description The issue is related to a NULL pointer dereference in the QGifHandler function when processing a malformed GIF image, resulting in a segmentation fault. This can be exploited by a remote attacker to caus...

gif2apng 1.9 - .gif Stack Buffer Overflow

gif2apng 1.9 - .gif Stack Buffer Overflow Exploit Title: gif2apng 1.9 '.gif' Stack-Buffer Overflow Date: 20 April 2018 Exploit Author: Hamm3r.py Vendor Homepage: http://gif2apng.sourceforge.net/ Version: 1.9 Tested on: Ubuntu 16.04 CVE : gif2apng is vulnerable to a stack based buffer overflow whe...

MGASA-2016-0432 Updated tracker packages fix security vulnerability

It was discovered that Tracker incorrectly handled certain malformed GIF images. If a user or automated system were tricked into downloading a specially-crafted GIF image, Tracker could crash, resulting in a denial of service...

CVE-2014-1564

Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated...

CVE-2014-1564

Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated...