CVE-2023-39742

CVE-2023-39742 affects giflib v5.2.1, with a segmentation fault in getarg.c identified as the root cause. Several connected advisories confirm the issue across distributions (Amazon Linux, Fedora, Alpine, Mariner), noting patched/updated packages are available (e.g., giflib and related utilities/...

CVE-2019-15133

CVE-2019-15133 is a vulnerability in GIFLIB where a malformed GIF can trigger a divide-by-zero in the DGifSlurp decoder when the ImageSize height is zero. Connected advisories confirm the issue affects GIFLIB up to versions prior to 5.2.1, with remediation provided by updating to 5.2.1 (e.g., SUS...

CVE-2022-28506

CVE-2022-28506 affects GifLib 5.2.1, specifically a heap-based overflow in DumpScreen2RGB() in gif2rgb.c. Public references in the docset confirm the flaw is a heap-buffer-overflow and note patches/updated packages exist (e.g., Mariner/Fedora advisories) with fixed versions such as giflib >= 5...

CVE-2023-48161

CVE-2023-48161 affects GifLib v5.2.1, with a heap/buffer overflow in the DumpScreen2RGB function (gif2rgb.c) that can allow a local attacker to obtain sensitive information. Public advisories (Amazon Linux ALAS/ALAS2, CBLMariner, and others) corroborate that GifLib 5.2.1 is vulnerable and referen...

CVE-2018-11490

CVE-2018-11490 affects GIFLIB (dgif_lib.c: DGifDecompressLine) with a heap-based buffer overflow caused by an unchecked array index (Private->RunningCode - 2). Potential denial of service or other impact. Affected: GIFLIB (including usages in sam2p 0.49.4 and related builds) and giflib in vari...

CVE-2026-26740

giflib 5.2.2 is affected by a Buffer Overflow in the EGifGCBToExtension path, which overwrites an existing Graphic Control Extension block without validating the allocated size. This can lead to a denial of service. The available sources confirm the vulnerability exists in the giflib 5.2.2 releas...

CVE-2021-40633

CVE-2021-40633 affects giflib 5.1.4; a memory leak in util/gif2rgb.c can allow a remote attacker to trigger an out-of-memory condition or DoS via a GIF file. Public advisories indicate fixes are available in updated giflib packages (e.g., versions >= 5.2.1-10 or equivalent patched releases). M...

CVE-2015-7555

CVE-2015-7555 (giflib/giffix in IBM FSM) is a heap-based buffer overflow caused by improper bounds checking in giffix.c when processing GIF records. IBM’s security bulletin for Flex System Manager (FSM) states this vulnerability could allow a local attacker to execute arbitrary code or crash the ...

CVE-2016-3977

CVE-2016-3977 is a heap-based buffer overflow in util/gif2rgb.c of giflib 5.1.2. The vulnerability allows a remote attacker to cause an application crash (DoS) by supplying a GIF with a crafted background color index. Connected documents confirm the issue in giflib 5.1.2 and describe the impact a...

CVE-2020-23922

CVE-2020-23922 is a vulnerability in giflib up to version 5.1.4 where the function DumpScreen2RGB in gif2rgb.c performs a heap-based buffer over-read . Connected sources (OSV, CNVD, NVD, ALAS advisories) confirm the issue and its impact attribution to giflib 5.1.4 and earlier. The vulnerability i...

CVE-2026-23868

CVE-2026-23868 affects giflib and is caused by a double-free due to a shallow copy in GifMakeSavedImage and improper error handling. Affected versions are older than the patched release (e.g., Mariner notes less than 5.2.1-11; Debian lists prior 5.1.9 series). Impact per sources is memory corrupt...

CVE-2024-45993

Summary: CVE-2024-45993 affects Giflib Project v5.2.2 and is a heap buffer overflow via gif2rgb. Multiple connected sources (NVD entry, OSV/Ubuntu/Amazon Linux advisories and Red Hat/Nessus references) consistently describe a heap overflow condition in gif2rgb.c leading to memory corruption/denia...

CVE-2018-11489

The CVE-2018-11489 entry describes a heap-based buffer overflow in GIFLIB’s DGifDecompressLine (dgif_lib.c) and, later, in sam2p’s cgif.c (sam2p 0.49.4). The vulnerability arises because a CrntCode array index is not checked, enabling a heap overflow that can lead to denial of service or potentia...

CVE-2016-3177

CVE-2016-3177 concerns GIFLIB 5.1.2 and affects the gifcolor.c component, with multiple use-after-free and double-free vulnerabilities described as having unspecified impact and attack vectors. The provided documents do not specify affected product variants beyond GIFLIB 5.1.2, nor provide remedi...