sidhartha kumar

I have successfully created a patch and submitted a Merge Request for this issue here: https://sourceforge.net/p/giflib/code/merge-requests/21/ The patch adds an input validation check at the top of GifQuantizeBuffer() that rejects zero dimensions and dimension pairs whose product would overflow INT_MAX, preventing the heap OOB write.

Fix integer overflow in GifQuantizeBuffer (CWE-190 → CWE-787)

added the patch.diff attachment couldn't more than one attachment at a time

Heap buffer overflow in GifQuantizeBuffer via integer overflow