PT-2024-31876 · Giflib+1 · Giflib+1

Publicado 2024-09-30 · Atualizado 2026-05-18 · CVE-2024-45993

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do software vulnerável e versões afetadas

Projeto Giflib versão 5.2.2

Descrição

O problema é um estouro de buffer de heap que pode ocorrer por meio da função gif2rgb.

Recomendações

Para o Giflib Project versão 5.2.2, considere desativar a função gif2rgb até que um patch esteja disponível para evitar possíveis explorações.

Correção

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

CLEANSTART-2026-CQ39708

CLEANSTART-2026-DV49899

CLEANSTART-2026-GE08280

CLEANSTART-2026-OQ84658

CVE-2024-45993

ECHO-8F15-7EE3-6C24

Produtos afetados

Debian

Giflib

Referências · 81

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GE08280.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CQ39708.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OQ84658.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DV49899.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32282 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-61726 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-61726 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-61770 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-25500 · Nota
• https://osv.dev/vulnerability/CVE-2026-33810 · Nota
• https://osv.dev/vulnerability/ghsa-mxw3-3hh2-x2mh · Nota
• https://osv.dev/vulnerability/ghsa-whrj-4476-wvmp · Nota
• https://osv.dev/vulnerability/ghsa-gh9q-2xrm-x6qv · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-31344 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-mhwm-jh88-3gjf · Nota