Giflib · Giflib · CVE-2023-48161
**Name of the Vulnerable Software and Affected Versions**
GifLib version 5.2.1
**Description**
The issue is related to a buffer overflow in the GifLib project, which allows a local attacker to obtain sensitive information. This is achieved via the `DumpSCreen2RGB` function in `gif2rgb.c`.
**Recommendations**
For GifLib version 5.2.1, consider disabling the `DumpSCreen2RGB` function in `gif2rgb.c` as a temporary workaround until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.