{"id":"CVE-2019-17534","aliases":["ALPINE-CVE-2019-17534","EUVD-2019-7884","GHSA-4hqm-7w7w-5w4r","UBUNTU-CVE-2019-17534","openSUSE-SU-2026:12266-1"],"status":"published","title":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a...","description":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02073,"percentile":0.81586,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2019-10-13T01:59:34Z","modified":"2026-11-03T06:32:29Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vips","fixed_in":["8.8.2-r0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.2-r0"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.18.7-1.1"}]}],"bundled":9}],"products":[{"vendor":"libvips","product":"libvips"}],"references":[{"url":"https://github.com/libvips/libvips/compare/v8.8.1...v8.8.2","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16796","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/libvips/libvips/commit/ce684dd008532ea0bf9d4a1d89bacb35f4a83f4d","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17534"},{"url":"https://github.com/advisories/GHSA-4hqm-7w7w-5w4r"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-17534","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-17534","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17534","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-69242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-70651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-70652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-70654","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-17534","description":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.","status":"published","published":"2019-10-13T01:59:34Z","modified":"2024-08-05T01:40:15.919Z","updated_at":"2026-11-02T14:20:24.678649Z"}],"euvd":[{"id":"EUVD-2019-7884","description":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.","status":"published","published":"2019-10-13T01:59:34Z","modified":"2024-08-05T01:40:15Z","updated_at":"2026-11-03T02:40:29.78058Z"}],"ghsa":[{"id":"GHSA-4hqm-7w7w-5w4r","title":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a...","description":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.","status":"published","published":"2022-05-24T16:58:42Z","modified":"2023-10-08T05:04:13Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:54:47.501822Z"}],"nvd":[{"id":"CVE-2019-17534","description":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.","status":"published","published":"2019-10-13T02:15:12.317Z","modified":"2026-06-17T02:24:05.52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:05:31.860711Z"}],"osv":[{"id":"ALPINE-CVE-2019-17534","description":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.","status":"published","published":"2019-10-13T02:15:12.317Z","modified":"2026-11-03T06:32:29.53296839Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:41.158523Z"},{"id":"CVE-2019-17534","description":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.","status":"published","published":"2019-10-13T02:15:12.317Z","modified":"2026-10-25T17:41:58.447702299Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"UBUNTU-CVE-2019-17534","description":"vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.","status":"withdrawn","published":"2019-10-13T02:15:00Z","modified":"2025-07-16T07:39:47.46101Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"openSUSE-SU-2026:12266-1","title":"libvips-devel-8.18.7-1.1 on GA media","description":"These are all security issues fixed in the libvips-devel-8.18.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-24T00:00:00Z","modified":"2026-10-25T17:30:03.892254255Z","updated_at":"2026-11-02T16:58:40.245664Z"}]}}