There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade giflib | Mar 26, 2024 | Apr 25, 2022 |
| Amazon_linux_2023 | — | Upgrade giflib-develUpgrade giflib-utilsUpgrade giflib-utils-debuginfoUpgrade giflibUpgrade giflib-debugsourceUpgrade giflib-debuginfo | Feb 17, 2025 | Apr 25, 2022 |
| Debian | — | Upgrade giflibNo solution exists | May 15, 2025 | Apr 25, 2022 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Huawei Euleros 2_0_sp3 | — | Upgrade giflib | Oct 28, 2022 | Apr 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade giflib | Aug 18, 2022 | Apr 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade giflib | Oct 11, 2022 | Apr 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade giflib-helpUpgrade giflib | Sep 14, 2022 | Apr 25, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 25, 2022 |
| Suse | — | Upgrade libgif7-32bitUpgrade giflib-develUpgrade libgif7Upgrade libgif6-32bitUpgrade giflib-devel-32bitUpgrade giflib-progsUpgrade libgif6 | Mar 7, 2024 | Apr 25, 2022 |
| Ubuntu | — | Upgrade giflib-tools (Ubuntu Pro)Upgrade giflib-tools | Jul 1, 2024 | Apr 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub