Description

Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution

Remediation

References

https://github.com/kohler/gifsicle/issues/114

https://www.debian.org/security/2018/dsa-4084

https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html

Related Vulnerabilities

CVE-2020-28434 Vulnerability in npm package gitblame

CVE-2022-23812 Vulnerability in npm package node-ipc

CVE-2022-25892 Vulnerability in npm package muhammara

CVE-2023-3431 Vulnerability in maven package net.sourceforge.plantuml:plantuml

CVE-2021-23429 Vulnerability in npm package transpile

Severity

Critical

Classification

CWE-416 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Issue Tracking Patch Third Party Advisory Mailing List