CVE-2023-39742
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Version 5.2.1 of giflib contains a segmentation fault in the getarg.c component, which may lead to unexpected application behavior.
Risk Assessment
The segmentation fault could allow attackers to execute remote code or crash the application, posing a risk to system stability.
Recommendation
It is recommended to update the giflib library to the latest version to mitigate this vulnerability.
Other vulnerabilities in giflib v5.2.1
See all- CVE-2016-3177Critical
Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.
- CVE-2026-26740High
A buffer overflow vulnerability in giflib version 5.2.2. A remote attacker can cause a denial of service via the EGifGCBToExtension function, which overwrites an existing Graphic Control Extension block without validating its allocated size.
- CVE-2026-23868Medium
Giflib contains a double-free vulnerability resulting from a shallow copy in GifMakeSavedImage and improper error handling. The conditions to trigger this vulnerability are difficult but possible.
- CVE-2024-45993Medium
A heap buffer overflow vulnerability was discovered in Giflib Project version 5.2.2 via the gif2rgb utility. The issue occurs when processing specially crafted GIF files, potentially leading to program crashes.
- CVE-2023-48161High
Buffer overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c.
Original NVD description (English source)
giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS