PT-2026-24375 · Giflib+1 · Giflib+1

Published 2026-03-10 · Updated 2026-05-19 · CVE-2026-23868

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Giflib (affected versions not specified)

Description Giflib contains a double-free vulnerability stemming from a shallow copy within the GifMakeSavedImage function and inadequate error handling. Triggering this issue may be difficult, but is potentially possible.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALSA-2026:19154

ALSA-2026:19367

ALSA-2026:8858

ALSA-2026:8859

ALSA-2026:8861

CLEANSTART-2026-KV09488

CVE-2026-23868

ECHO-77A1-940A-2CE8

OESA-2026-1972

OESA-2026-1973

OESA-2026-1974

OESA-2026-1975

OESA-2026-1976

OESA-2026-2094

OPENSUSE-SU-2026:10326-1

OPENSUSE-SU-2026:20601-1

RHSA-2026:19154

RHSA-2026:19367

RHSA-2026:8858

RHSA-2026:8859

RHSA-2026:8861

RHSA-2026:8883

RHSA-2026:8884

RHSA-2026:8885

RHSA-2026:8886

RHSA-2026:8887

RHSA-2026:9290

RHSA-2026:9291

RHSA-2026:9292

RHSA-2026:9294

RHSA-2026:9295

SUSE-SU-2026:1005-1

SUSE-SU-2026:1338-1

Affected Products

Giflib

Rocky Linux

References · 78

• https://osv.dev/vulnerability/OESA-2026-1975 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-8861.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1005-1 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-8858.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23868 · Security Note
• https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-42577 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1972 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:19154 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24308 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1976 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20601-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1338-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23868 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:8858 · Vendor Advisory