Xin-Jiang

**Name of the Vulnerable Software and Affected Versions** GIFLIB versions 3.0.x sam2p version 0.49.4 **Description** The issue is related to a heap-based buffer overflow in the DGifDecompressLine function due to an un-checked array index `Private->RunningCode - 2`. This could lead to a denial of service or other unspecified impact. The vulnerability can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. **Recommendations** For GIFLIB versions 3.0.x, consider disabling the `DGifDecompressLine` function until a patch is available. For sam2p version 0.49.4, restrict access to the `DGifDecompressLine` function in the `cgif.c` component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libsndfile version 1.0.28 **Description** The issue is related to the `double64 init()` function in the libsndfile library, which lacks a check for division by zero. This can be exploited by a remote attacker to cause a denial of service (DoS) when playing a specially crafted audio file. **Recommendations** For libsndfile version 1.0.28, consider disabling the `double64 init()` function as a temporary workaround until a patch is available. Restrict access to crafted audio files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.