CVE-2024-45993
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A heap buffer overflow vulnerability was discovered in Giflib Project version 5.2.2 via the gif2rgb utility. The issue occurs when processing specially crafted GIF files, potentially leading to program crashes.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code remotely or cause a denial of service (DoS) by delivering a malicious GIF file to applications using Giflib.
Recommendation
It is recommended to immediately update the Giflib library to the latest available version that includes a fix for CVE-2024-45993. If an update is not possible, restrict processing of untrusted GIF files.
Other vulnerabilities in Giflib
See all- CVE-2016-3177Critical
Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.
- CVE-2026-26740High
A buffer overflow vulnerability in giflib version 5.2.2. A remote attacker can cause a denial of service via the EGifGCBToExtension function, which overwrites an existing Graphic Control Extension block without validating its allocated size.
- CVE-2026-23868Medium
Giflib contains a double-free vulnerability resulting from a shallow copy in GifMakeSavedImage and improper error handling. The conditions to trigger this vulnerability are difficult but possible.
- CVE-2023-39742Medium
Version 5.2.1 of giflib contains a segmentation fault in the getarg.c component, which may lead to unexpected application behavior.
Original NVD description (English source)
Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.