CVE-2023-48161
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Buffer overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c.
Risk Assessment
A local attacker could exploit this vulnerability to leak sensitive data from the memory of a process handling GIF files.
Recommendation
Update GifLib to the latest patched version or restrict local access to applications using this library.
Other vulnerabilities in GifLib
See all- CVE-2016-3177Critical
Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.
- CVE-2026-26740High
A buffer overflow vulnerability in giflib version 5.2.2. A remote attacker can cause a denial of service via the EGifGCBToExtension function, which overwrites an existing Graphic Control Extension block without validating its allocated size.
- CVE-2026-23868Medium
Giflib contains a double-free vulnerability resulting from a shallow copy in GifMakeSavedImage and improper error handling. The conditions to trigger this vulnerability are difficult but possible.
- CVE-2024-45993Medium
A heap buffer overflow vulnerability was discovered in Giflib Project version 5.2.2 via the gif2rgb utility. The issue occurs when processing specially crafted GIF files, potentially leading to program crashes.
- CVE-2023-39742Medium
Version 5.2.1 of giflib contains a segmentation fault in the getarg.c component, which may lead to unexpected application behavior.
Original NVD description (English source)
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c
Vulnerability data from NVD (NIST) · CISA KEV · EPSS