NIXPKGS-2026-0618

GitHub issue published on 11 Mar 2026

Permalink CVE-2026-23868

updated 2 weeks ago by @mweinelt Activity log

Created automatic suggestion 2 weeks ago
@mweinelt accepted 2 weeks ago
@mweinelt published on GitHub 2 weeks ago

Giflib contains a double-free vulnerability that is the result of …

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

References

https://www.facebook.com/security/advisories/cve-2026-23868 x_refsource_CONFIRM
https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c1… x_refsource_CONFIRM

Affected products

giflib

=<6.1.1

Matching in nixpkgs

pkgs.giflib

Library for reading and writing gif images

nixos-unstable 5.2.2
- nixpkgs-unstable 5.2.2
- nixos-unstable-small 5.2.2
nixos-25.11 5.2.2
- nixos-25.11-small 5.2.2
- nixpkgs-25.11-darwin 5.2.2

https://www.facebook.com/security/advisories/cve-2026-23868
https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7

Nixpkgs Security Tracker

Details of issue NIXPKGS-2026-0618

References

Affected products

Matching in nixpkgs

pkgs.giflib