CVE Tools

Giflib-project

2 CVEs tracked since 2016. Since Apr 2016, none of them reached CISA KEV.

Giflib-project CVEs per month

Apr 2016 to Apr 2016. Point at a month, or focus the strip and use the arrow keys.
Giflib-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2016-0420

Products

The products that kept showing up in Giflib-project's monthly top three, with their CVEs summed over those months.

  1. Giflib21 month

Latest CVEs

The 14 most recently published vulnerabilities affecting Giflib-project.

  1. CVE-2026-26740Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without vali...8.2
  2. CVE-2026-23868Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult...5.1
  3. CVE-2024-45993Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.6.5
  4. CVE-2023-48161Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c7.1
  5. CVE-2023-39742giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.5.5
  6. CVE-2021-40633A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.8.8
  7. CVE-2022-28506There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.5.5
  8. CVE-2020-23922An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.7.1
  9. CVE-2019-15133In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to...6.5
  10. CVE-2018-11489The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index...8.8
  11. CVE-2018-11490The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCod...8.8
  12. CVE-2016-3177Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.9.8
  13. CVE-2016-3977Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.5.5
  14. CVE-2015-7555Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file.5.5

The record

Peak rank
#82 in Apr 2016
Busiest month shown
Apr 2016, 2 CVEs
Months with a KEV entry
0 since Apr 2016
Monthly snapshots
1 since 2016
Giflib-project's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store