CVE-2023-39742
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Version 5.2.1 of giflib contains a segmentation fault in the getarg.c component, which may lead to unexpected application behavior.
Risk Assessment
The segmentation fault could allow attackers to execute remote code or crash the application, posing a risk to system stability.
Recommendation
It is recommended to update the giflib library to the latest version to mitigate this vulnerability.
Other vulnerabilities in giflib v5.2.1
See all- CVE-2016-3177Critical
Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.
- CVE-2026-26740High
A buffer overflow vulnerability in giflib version 5.2.2. A remote attacker can cause a denial of service via the EGifGCBToExtension function, which overwrites an existing Graphic Control Extension block without validating its allocated size.
- CVE-2026-23868Medium
Giflib contains a double-free vulnerability resulting from a shallow copy in GifMakeSavedImage and improper error handling. The conditions to trigger this vulnerability are difficult but possible.
- CVE-2024-45993Medium
A heap buffer overflow vulnerability was discovered in Giflib Project version 5.2.2 via the gif2rgb utility. The issue occurs when processing specially crafted GIF files, potentially leading to program crashes.
Original NVD description (English source)
giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.