Suggestions search

All statuses

Filter by:

With package: giflib

Found 2 matching suggestions

View:

Compact

Detailed

Published

Permalink CVE-2026-23868

updated 2 weeks ago by @mweinelt Activity log

Created automatic suggestion 2 weeks ago
@mweinelt accepted 2 weeks ago
@mweinelt published on GitHub 2 weeks ago

Giflib contains a double-free vulnerability that is the result of …

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

References

https://www.facebook.com/security/advisories/cve-2026-23868 x_refsource_CONFIRM
https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c1… x_refsource_CONFIRM

Affected products

giflib

=<6.1.1

Matching in nixpkgs

pkgs.giflib

Library for reading and writing gif images

nixos-unstable 5.2.2
- nixpkgs-unstable 5.2.2
- nixos-unstable-small 5.2.2
nixos-25.11 5.2.2
- nixos-25.11-small 5.2.2
- nixpkgs-25.11-darwin 5.2.2

https://www.facebook.com/security/advisories/cve-2026-23868
https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7

Untriaged

Permalink CVE-2025-31344

7.3 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): HIGH

created 6 months ago

The giflib open-source component has a buffer overflow vulnerability

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.