Description

Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution

Remediation

References

https://github.com/kohler/gifsicle/issues/114

https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html

https://www.debian.org/security/2018/dsa-4084

Related Vulnerabilities

CVE-2021-41164 Vulnerability in npm package ckeditor4

CVE-2019-1010266 Vulnerability in maven package org.fujion.webjars:lodash

CVE-2015-8851 Vulnerability in maven package org.webjars.npm:node-uuid

CVE-2021-21615 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2023-25164 Vulnerability in npm package @tinacms/cli

Severity

Critical

Classification

CWE-416 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Issue Tracking Patch Third Party Advisory Mailing List