CVE-2026-26740
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A buffer overflow vulnerability in giflib version 5.2.2. A remote attacker can cause a denial of service via the EGifGCBToExtension function, which overwrites an existing Graphic Control Extension block without validating its allocated size.
Risk Assessment
A remote attacker can crash applications using giflib, leading to service disruption.
Recommendation
Update giflib to a patched version or apply the security fix.
Other vulnerabilities in giflib
See all- CVE-2016-3177Critical
Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.
- CVE-2026-23868Medium
Giflib contains a double-free vulnerability resulting from a shallow copy in GifMakeSavedImage and improper error handling. The conditions to trigger this vulnerability are difficult but possible.
- CVE-2024-45993Medium
A heap buffer overflow vulnerability was discovered in Giflib Project version 5.2.2 via the gif2rgb utility. The issue occurs when processing specially crafted GIF files, potentially leading to program crashes.
- CVE-2023-39742Medium
Version 5.2.1 of giflib contains a segmentation fault in the getarg.c component, which may lead to unexpected application behavior.
Original NVD description (English source)
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.