Every CVE Search/ Get API key

CVE-2023-39742

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

5.5 MediumFix available

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.35%Up 0.3 points since Aug 26, 2023
90%50%10%1%

What each source reports

NVD Score used 5.5

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
CVE-2023-39742
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-120
Updated
2026-11-02
CVE List No score

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
CVE-2023-39742
Updated
2026-11-02
EUVDEUVD-2023-43442 No score

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
EUVD-2023-43442
Updated
2026-11-03
GitHub AdvisoriesGHSA-29c8-646j-hvw9 5.5

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
GHSA-29c8-646j-hvw9
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-120
Updated
2026-11-02
OSVALPINE-CVE-2023-39742 5.5

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
ALPINE-CVE-2023-39742
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-28091 5.5

CVE-2023-39742 affecting package giflib for versions less than 5.2.1-8

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
AZL-28091
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 12 moreShow less
OSVAZL-34728 5.5

CVE-2023-39742 affecting package giflib for versions less than 5.2.1-8

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
AZL-34728
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2023-39742 5.5
Record
BELL-CVE-2023-39742
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
CVE-2023-39742
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-39742 5.5

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
DEBIAN-CVE-2023-39742
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-818 5.5

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
JLSEC-2026-818
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1675 5.5

giflib security update

giflib is a library of gif images and provides utilities for processing images.

Security Fix(es):

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.(CVE-2023-39742)

Record
OESA-2023-1675
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-39742 5.5

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Record
UBUNTU-CVE-2023-39742
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1776697883 No score

giflib: Fix of CVE-2023-39742

  • CVE-2023-39742: fix segfault in getarg.c
Record
CLSA-2026-1776697883
Updated
2026-11-02
OSVMGASA-2023-0278 No score

Updated giflib packages fix security vulnerability

The updated packages fix a security vulnerability:

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. (CVE-2023-39742)

Record
MGASA-2023-0278
Updated
2026-11-02
OSVSUSE-SU-2024:2607-1 No score

Security update for giflib

This update for giflib fixes the following issues:

  • CVE-2022-28506: Fixed heap buffer overflow in function DumpScreen2RGB() (bsc#1198880)
  • CVE-2023-39742: Fixed segmentation fault via the component getarg.c (bsc#1214678)
Record
SUSE-SU-2024:2607-1
Updated
2026-11-02
OSVSUSE-SU-2026:1005-1 No score

Security update for giflib

This update for giflib fixes the following issues:

  • CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).
Record
SUSE-SU-2026:1005-1
Updated
2026-11-02
OSVUSN-6824-1 No score

giflib vulnerabilities

It was discovered that GIFLIB incorrectly handled certain GIF files. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-40633, CVE-2022-28506, CVE-2023-39742)

Record
USN-6824-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
giflib
Alpine:v3.17
 before 5.2.2-r0
5.2.2-r0
giflib
Alpine:v3.18
 before 5.2.2-r0
5.2.2-r0
giflib
Alpine:v3.19
 before 5.2.2-r0
5.2.2-r0
giflib
Alpine:v3.20
 before 5.2.2-r0
5.2.2-r0
giflib
Alpine:v3.21
 before 5.2.2-r0
5.2.2-r0
giflib
Alpine:v3.22
 before 5.2.2-r0
5.2.2-r0
giflib
Alpine:v3.23
 before 5.2.2-r0
5.2.2-r0
giflib
Alpine:v3.24
 before 5.2.2-r0
5.2.2-r0
giflib
Azure Linux:2
 before 5.2.1-8
5.2.1-8
giflib
Azure Linux:3
 before 5.2.1-8
5.2.1-8
Show 24 moreShow less
Affected packages
PackageAffectedFixed
giflib
Alpaquita:23
 5.2.1-r2 up to 5.2.2-r0
5.2.2-r0
giflib
Alpaquita:stream
 5.2.1-r5 up to 5.2.2-r0
5.2.2-r0
giflib
TuxCare:AlmaLinux:9.6
 before 5.2.1-9.el9.tuxcare.els2
5.2.1-9.el9.tuxcare.els2
giflib-devel
TuxCare:AlmaLinux:9.6
 before 5.2.1-9.el9.tuxcare.els2
5.2.1-9.el9.tuxcare.els2
giflib-utils
TuxCare:AlmaLinux:9.6
 before 5.2.1-9.el9.tuxcare.els2
5.2.1-9.el9.tuxcare.els2
giflib
Debian:12
 All versions, plus listed versions
5.2.1-2.55.2.1-2.5+deb12u15.2.2-16.1.3-1
 None known
giflib
Debian:13
 All versions, plus listed versions
5.2.2-15.2.2-1+deb13u16.1.3-1
 None known
giflib
Debian:14
 All versions, plus listed versions
5.2.2-16.1.3-1
 None known
Giflib_jll
Julia
 5.2.1+0 up to 5.2.2+0
5.2.2+0
giflib
Mageia:8
 before 5.2.1-5.2.mga8
5.2.1-5.2.mga8
giflib
Mageia:9
 before 5.2.1-7.1.mga9
5.2.1-7.1.mga9
giflib
openEuler:20.03-LTS-SP1
 before 5.2.1-4.oe1
5.2.1-4.oe1
giflib
openEuler:20.03-LTS-SP3
 before 5.2.1-4.oe1
5.2.1-4.oe1
giflib
openEuler:22.03-LTS
 before 5.2.1-7.oe2203sp2
5.2.1-7.oe2203sp2
giflib
openEuler:22.03-LTS-SP1
 before 5.2.1-7.oe2203sp1
5.2.1-7.oe2203sp1
giflib
openEuler:22.03-LTS-SP2
 before 5.2.1-7.oe2203sp2
5.2.1-7.oe2203sp2
giflib
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 5.0.5-13.6.1
5.0.5-13.6.1
giflib
SUSE:Linux Enterprise Server 12 SP5
 before 5.0.5-13.6.1
5.0.5-13.6.1
giflib
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 5.0.5-13.6.1
5.0.5-13.6.1
giflib
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 5.0.6-13.12.1
5.0.6-13.12.1
giflib
Ubuntu:Pro:16.04:LTS
 before 5.1.4-0.3~16.04.1+esm1, plus listed versions
4.1.6-115.1.1-0ubuntu15.1.1-0.15.1.1-0.25.1.2-0.15.1.2-0.25.1.4-0.3~16.045.1.4-0.3~16.04.1
5.1.4-0.3~16.04.1+esm1
giflib
Ubuntu:Pro:18.04:LTS
 before 5.1.4-2ubuntu0.1+esm1, plus listed versions
5.1.4-15.1.4-25.1.4-2ubuntu0.1
5.1.4-2ubuntu0.1+esm1
giflib
Ubuntu:20.04:LTS
 before 5.1.9-1ubuntu0.1, plus listed versions
5.1.4-3ubuntu15.1.9-1
5.1.9-1ubuntu0.1
giflib
Ubuntu:22.04:LTS
 before 5.1.9-2ubuntu0.1, plus listed versions
5.1.9-2build15.1.9-2build2
5.1.9-2ubuntu0.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-39742 is a medium vulnerability (CVSS 5.5) in Giflib Project Giflib, published August 25, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in giflib 5.2.2-r0.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open