CVE-2023-39114
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A segmentation violation was discovered in the ngiflib library via the function SDL_LoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif.
Risk Assessment
An attacker could exploit this vulnerability to cause application crashes or potentially execute malicious code.
Recommendation
It is recommended to update the ngiflib library to the latest version to mitigate this vulnerability.
Other vulnerabilities in ngiflib
See all- CVE-2023-39113Medium
In ngiflib version with commit fb271, a segmentation violation was discovered in the 'main' function at gif2tag.c. This vulnerability is triggered when running the gif2tga program.
- CVE-2023-37748Medium
An infinite loop was discovered in the ngiflib library in the DecodeGifImg function, which may lead to application hang when processing GIF images.
Original NVD description (English source)
ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS