CVE Catalog
CVE-2026-30141
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.57%
44th percentile - higher than 44% of all known CVEs
Summary
In the bitbank2 AnimatedGIF library v2.2.0, a buffer overflow in the DecodeLZW function allows remote attackers to cause a crash or potentially execute arbitrary code via a crafted GIF file.
Risk Assessment
An attacker can supply a malicious GIF file that may cause application crash or code execution.
Recommendation
Update the bitbank2 AnimatedGIF library to a version after 2.2.0 that includes the fix.
Original NVD description (English source)
An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via a crafted GIF file.