Logo
componentgiflib
Name
giflib
Version
5.2.2
Type
library
Description
-
Licenses
MIT
PURL
-
CPE
cpe:2.3:a:giflib_project:giflib:5.2.2:-:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
6.1.3

Patches#


#
Title
Author
Resolve
1
Makefile: add targets to manage static building
Fabrice Fontaine <fontaine.fabrice@gmail.com>
2
Fix several defects found by Coverity scan
Sandro Mani <manisandro@gmail.com>
3
Patch #3
Thomas Perale <thomas.perale@mind.be>
CVE-2021-40633
4
Patch #4
Thomas Perale <thomas.perale@mind.be>
CVE-2025-31344
5
Patch #5
Thomas Perale <thomas.perale@mind.be>
CVE-2026-23868

Vulnerabilities#


Name
Analysis
Description
Exploitable
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.
Patched
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.
Patched
Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.
Exploitable
Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.
Patched
A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.