| 213 |
gifecho: global-buffer-overflow read in GenRasterTextLine for text bytes >= 0x80 (GifAsciiTable8x8 has only 128 rows) |
v1.0_(example) |
open |
|
2026-10-22
|
2026-10-22
|
|
| 212 |
gifbuild: 1-byte stack-buffer-overflow in Icon2Gif (sscanf writes KeyTable[ColorMapSize] before bounds check) |
v1.0_(example) |
open |
|
2026-10-22
|
2026-10-22
|
|
| 210 |
Double-free in GifMakeSavedImage (sibling of CVE-2026-23868) |
v1.0_(example) |
open |
|
2026-10-10
|
2026-10-10
|
|
| 209 |
GifMakeSavedImage: stale ImageCount use-after-free and OOB write in the free/append lifecycle; self-aliased copy UAF; NULL-handling hardening |
v1.0_(example) |
open |
|
2026-09-30
|
2026-09-30
|
|
| 207 |
gifclrmp -t inverts the translation index at gifclrmp.c:392, producing wrong colours and a heap out-of-bounds write |
v1.0_(example) |
open |
|
2026-09-06
|
2026-09-06
|
|
| 205 |
EGifPutImageDesc: unreachable guard, and writes whose result is discarded |
v1.0_(example) |
open |
|
2026-08-21
|
2026-08-21
|
|
| 204 |
Fix integer overflow and (unsigned int) truncation in gif2rgb.c |
v1.0_(example) |
open |
|
2026-07-14
|
2026-07-14
|
|
| 202 |
Heap buffer overflow in GifQuantizeBuffer via integer overflow |
v1.0_(example) |
open |
|
2026-05-17
|
2026-06-04
|
|
| 201 |
Heap buffer overflow in EGifGCBToSavedExtension on malformed Graphics Control Extension |
v1.0_(example) |
open |
|
2026-05-15
|
2026-06-04
|
|
| 198 |
EGifPutScreenDesc pointer-reuse optimization causes double-free |
v1.0_(example) |
open |
|
2026-04-20
|
2026-10-11
|
|
| 189 |
giflib 6.1.1: Missing symbol |
v1.0_(example) |
open |
Eric S. Raymond
|
2026-02-19
|
2026-04-12
|
|
