Summary
It was discovered that GIFLIB incorrectly handled certain GIF image files.
If a user or automated system were tricked into opening a specially crafted
GIF file, a remote attacker could use this issue to cause GIFLIB to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | giflib | 5.1.9-2ubuntu0.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | giflib | 5.2.2-1ubuntu1.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | giflib | 5.2.2-1ubuntu3.2 |
Vulnerabilities 2
-
High 8.2
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBTo…
-
Medium 5.1
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect err…