CVE-2026-23868

MEDIUM EPSS 1.6%
Published Mar 10, 20263mo ago · Modified Jun 17, 20262w ago
5.1 CVSS 3.1
Medium
Find Similar
Published Mar 10, 2026 3mo ago
Last Modified Jun 17, 2026 2w ago

Description

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

CVSS Details

Base Score
5.1
Exploitability
1.4
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
1.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-415

Affected Products 1

VendorProductVersionRange
giflib_projectgiflib*≥5.0.0  –  ≤6.1.1

References 2

  • sourceforge.net https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7
    Patch
  • facebook.com https://www.facebook.com/security/advisories/cve-2026-23868
    Third Party Advisory

Remediation

  • sourceforge.net https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7
    Patch