CVE-2019-15133

MEDIUM EPSS 71.8%

Published Aug 17, 20196y ago · Modified Jun 17, 20262w ago

6.5 CVSS 3.1

Medium

Published Aug 17, 2019 6y ago

Last Modified Jun 17, 2026 2w ago

Description

In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero.

CVSS Details

Base Score

6.5

Exploitability

2.8

Impact

3.6

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

71.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-369

Affected Products 5

Vendor	Product	Version	Range
giflib_project	giflib	*	<5.1.7
canonical	ubuntu_linux	16.04	any
canonical	ubuntu_linux	18.04	any
canonical	ubuntu_linux	19.04	any
debian	debian_linux	10.0	any

References 3

bugs.chromium.org https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13008

Mailing ListThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2022/12/msg00008.html

Mailing ListThird Party Advisory
usn.ubuntu.com https://usn.ubuntu.com/4107-1/

Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.