Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.
CVSS Details
- CVSS 3.1 Base Score: 5.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade giflib-develUpgrade giflib | May 3, 2026 | Apr 20, 2026 |
| Amazon Linux Ami 2 | — | Upgrade giflibUpgrade giflib-debuginfoUpgrade giflib-utilsUpgrade giflib-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade giflibUpgrade giflib-debugsourceUpgrade giflib-utils-debuginfoUpgrade giflib-debuginfoUpgrade giflib-utilsUpgrade giflib-devel | Apr 7, 2026 | Mar 10, 2026 |
| Debian | — | Upgrade giflib | Jun 28, 2026 | Jun 28, 2026 |
| Oracle_linux | — | Upgrade giflib-utilsUpgrade giflib-develUpgrade giflib | Apr 22, 2026 | Mar 10, 2026 |
| Redhat_linux | — | Upgrade giflib-develNo solution existsUpgrade giflib-debugsourceUpgrade giflibUpgrade giflib-utilsUpgrade giflib-utils-debuginfoUpgrade giflib-debuginfo | Apr 21, 2026 | Mar 10, 2026 |
| Rocky_linux | — | Upgrade giflib-debuginfoUpgrade giflib-develUpgrade giflib-debugsourceUpgrade giflib | Apr 23, 2026 | Apr 21, 2026 |
| Ubuntu | — | Upgrade libgif7Upgrade giflib-tools | Jul 22, 2026 | Mar 10, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub