Logo
componentgiflib
Name
giflib
Version
6.1.3
Type
library
Description
shared library for GIF images
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:giflib_project:giflib:6.1.3:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
5.2.2
scarthgap
5.2.2

Patches#


#
Title
Author
Resolve
1
Fix CVE-2026-26740: heap OOB write in EGifGCBToSavedExtension
Anthony Hurtado <amhurtado@protonmail.com>
CVE-2026-26740

Vulnerabilities#


Name
Analysis
Description
Patched
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.
Not Affected
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.