ALT-PU-2026-3273-4

Package update giflib in branch sisyphus

Version6.1.1-alt1

Published2026-05-14

Max severityHIGH

Severity:

Closed issues (3)

HIGH8.2

Уязвимость функции EGifGCBToExtension библиотеки для работы с GIF файлами GIFLIB, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2026-05-12

CVSS 3.xHIGH 8.2

CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CVSS 2.0HIGH 7.5

CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P

References

CVE-2026-26740

MEDIUM6.5

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.

Published: 2024-09-30Modified: 2025-07-10

CVSS 3.xMEDIUM 6.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

References

HIGH8.2

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.

Published: 2026-03-18Modified: 2026-03-20

CVSS 3.xHIGH 8.2

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

References

https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflib_giftool_gce_len_heap_oobwrite_disclosure.md