CVE-2026-26740

Published: March 19, 2026Last modified: September 4, 2026

Description

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.

Severity score breakdown

ParameterValue
Base score8.2
Attack VectorNETWORK
Attack complexityLOW
Privileges requiredNONE
User interactionNONE
ScopeUNCHANGED
ConfidentialityNONE
Integrity impactLOW
Availability impactHIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Notes

fix not available

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSgiflibUnknown (5.2.1-r2)
25 LTSgiflibFixed (5.2.2-r3)
StreamgiflibFixed (5.2.2-r3)

References

ON THIS PAGE