CVE-2024-45993

MediumCVSS 6.5

Published: 30/09/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

A heap buffer overflow vulnerability was discovered in Giflib Project version 5.2.2 via the gif2rgb utility. The issue occurs when processing specially crafted GIF files, potentially leading to program crashes.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code remotely or cause a denial of service (DoS) by delivering a malicious GIF file to applications using Giflib.

Recommendation

It is recommended to immediately update the Giflib library to the latest available version that includes a fix for CVE-2024-45993. If an update is not possible, restrict processing of untrusted GIF files.

Original NVD description (English source)

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.