Giflib Project vulnerabilities
Published CVEs affecting Giflib Project products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-26740
High · 8.2
CWE-787 Mar 18, 2026
Out-of-bounds Write in Giflib Project Giflib
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.
CVE-2026-23868
Medium · 5.1
CWE-415 Mar 10, 2026
Double Free in Giflib Project Giflib
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.
CVE-2023-48161
High · 7.1
CWE-787 Nov 22, 2023
Out-of-bounds Write in Giflib Project Giflib
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c