Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:HGiflib Project Giflib
APPGiflib Project5.2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
References
Related vulnerabilities
CVE-2016-3177CRITICAL9.8PL ✓same product
Podatności use-after-free i double-free w GIFLIB 5.1.2
CVE-2023-48161HIGH7.1same product
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive inf...
CVE-2021-40633HIGH8.8same product
A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an ...
CVE-2020-23922HIGH7.1same product
An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...
CVE-2018-11490HIGH8.8same product
The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c i...