Vulnerabilities > Giflib Project > High

DATE CVE VULNERABILITY TITLE RISK
2023-11-22 CVE-2023-48161 Out-of-bounds Write vulnerability in Giflib Project Giflib 5.2.1
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c
local
low complexity
giflib-project CWE-787
7.1
2022-06-14 CVE-2021-40633 Memory Leak vulnerability in Giflib Project Giflib 5.1.4
A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.
network
low complexity
giflib-project CWE-401
8.8
2021-04-21 CVE-2020-23922 Out-of-bounds Read vulnerability in multiple products
An issue was discovered in giflib through 5.1.4.
local
low complexity
giflib-project apache CWE-125
7.1
2018-05-26 CVE-2018-11490 Improper Validation of Array Index vulnerability in multiple products
The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCode - 2" array index is not checked.
8.8
2018-05-26 CVE-2018-11489 Improper Validation of Array Index vulnerability in multiple products
The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked.
network
low complexity
sam2p-project giflib-project CWE-129
8.8