CVE Catalog
CVE-2023-37748
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.26%
17th percentile - higher than 17% of all known CVEs
Summary
An infinite loop was discovered in the ngiflib library in the DecodeGifImg function, which may lead to application hang when processing GIF images.
Risk Assessment
An attacker could exploit this vulnerability to cause service downtime, leading to potential financial losses for the organization.
Recommendation
It is recommended to update the ngiflib library to the latest version to mitigate this vulnerability.
Original NVD description (English source)
ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c.