Giflib vulnerabilities

Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.

A buffer overflow vulnerability in giflib version 5.2.2. A remote attacker can cause a denial of service via the EGifGCBToExtension function, which overwrites an existing Graphic Control Extension block without validating its allocated size.

Giflib contains a double-free vulnerability resulting from a shallow copy in GifMakeSavedImage and improper error handling. The conditions to trigger this vulnerability are difficult but possible.

A heap buffer overflow vulnerability was discovered in Giflib Project version 5.2.2 via the gif2rgb utility. The issue occurs when processing specially crafted GIF files, potentially leading to program crashes.

Version 5.2.1 of giflib contains a segmentation fault in the getarg.c component, which may lead to unexpected application behavior.