CVE-2023-37748
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
An infinite loop was discovered in the ngiflib library in the DecodeGifImg function, which may lead to application hang when processing GIF images.
Risk Assessment
An attacker could exploit this vulnerability to cause service downtime, leading to potential financial losses for the organization.
Recommendation
It is recommended to update the ngiflib library to the latest version to mitigate this vulnerability.
Other vulnerabilities in ngiflib
See all- CVE-2023-39114Medium
A segmentation violation was discovered in the ngiflib library via the function SDL_LoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif.
- CVE-2023-39113Medium
In ngiflib version with commit fb271, a segmentation violation was discovered in the 'main' function at gif2tag.c. This vulnerability is triggered when running the gif2tga program.
Original NVD description (English source)
ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS