Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-23868

Опубликовано: 10 мар. 2026
Источник: debian
EPSS Низкий

Описание

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
giflibunfixedpackage

Примечания

  • https://www.facebook.com/security/advisories/cve-2026-23868

  • https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7

EPSS

Процентиль: 4%
0.00017
Низкий

Связанные уязвимости

CVSS3: 5.1
ubuntu
17 дней назад

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

CVSS3: 7
redhat
17 дней назад

A flaw was found in giflib. This double-free vulnerability, caused by a shallow copy in GifMakeSavedImage and incorrect error handling, may allow an attacker to corrupt memory. While difficult to trigger, successful exploitation could potentially lead to arbitrary code execution or a denial of service.

CVSS3: 5.1
nvd
17 дней назад

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

CVSS3: 7
msrc
14 дней назад

Описание отсутствует

CVSS3: 5.1
github
17 дней назад

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

EPSS

Процентиль: 4%
0.00017
Низкий