{"id":"CVE-2022-28506","aliases":["ALPINE-CVE-2022-28506","AZL-10305","AZL-34727","BELL-CVE-2022-28506","DEBIAN-CVE-2022-28506","EUVD-2022-32948","GHSA-x77v-4m7v-7fgv","JLSEC-2026-817","MGASA-2022-0275","OESA-2022-1723","ROOT-OS-ALPINE-315-CVE-2022-28506","SUSE-SU-2024:0786-1","SUSE-SU-2024:2607-1","UBUNTU-CVE-2022-28506","USN-6824-1"],"status":"published","title":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01253,"percentile":0.69704,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-04-25T12:53:01Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"giflib","fixed_in":["5.2.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"giflib","fixed_in":["5.2.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"giflib","fixed_in":["5.2.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"giflib","fixed_in":["5.2.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"giflib","fixed_in":["5.2.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"giflib","fixed_in":["5.2.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"giflib","fixed_in":["5.2.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"giflib","fixed_in":["5.2.1-r2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"giflib","fixed_in":["5.2.1-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"giflib","fixed_in":["5.2.1-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"giflib","fixed_in":["5.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"giflib","fixed_in":["5.2.2-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Giflib_jll","fixed_in":["5.2.2+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"mingw-giflib","fixed_in":["5.2.1-2.1.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"giflib","fixed_in":["5.2.1-5.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"giflib","fixed_in":["5.2.1-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"giflib","fixed_in":["5.2.1-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"giflib","fixed_in":["5.2.1-4.oe2203"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"giflib","fixed_in":["5.2.1-r00072","5.2.1-r00076","5.2.1-r00074","5.2.1-r00073","5.2.1-r00075","5.2.1-r00077"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"rootio-giflib","fixed_in":["5.2.1-r00072","5.2.1-r00076","5.2.1-r00074","5.2.1-r00073","5.2.1-r00075","5.2.1-r00077"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"giflib","fixed_in":["5.1.4-0.3~16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"giflib","fixed_in":["5.1.4-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"giflib","fixed_in":["5.1.9-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"giflib","fixed_in":["5.1.9-2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1-2.5","5.2.1-2.5+deb12u1","5.2.2-1","6.1.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"Giflib_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"5.2.1+0"},{"fixed":"5.2.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"mingw-giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-2.1.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-5.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-4.oe2203"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r00072"},{"fixed":"5.2.1-r00076"},{"fixed":"5.2.1-r00074"},{"fixed":"5.2.1-r00073"},{"fixed":"5.2.1-r00075"},{"fixed":"5.2.1-r00077"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"rootio-giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-r00072"},{"fixed":"5.2.1-r00076"},{"fixed":"5.2.1-r00074"},{"fixed":"5.2.1-r00073"},{"fixed":"5.2.1-r00075"},{"fixed":"5.2.1-r00077"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-13.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-13.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-13.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-0.3~16.04.1+esm1"}]}],"versions":["4.1.6-11","5.1.1-0ubuntu1","5.1.1-0.1","5.1.1-0.2","5.1.2-0.1","5.1.2-0.2","5.1.4-0.3~16.04","5.1.4-0.3~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+esm1"}]}],"versions":["5.1.4-1","5.1.4-2","5.1.4-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-1ubuntu0.1"}]}],"versions":["5.1.4-3ubuntu1","5.1.9-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-2ubuntu0.1"}]}],"versions":["5.1.9-2build1","5.1.9-2build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-0.3~16.04.1+esm1"}]}],"versions":["4.1.6-11","5.1.1-0ubuntu1","5.1.1-0.1","5.1.1-0.2","5.1.2-0.1","5.1.2-0.2","5.1.4-0.3~16.04","5.1.4-0.3~16.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+esm1"}]}],"versions":["5.1.4-1","5.1.4-2","5.1.4-2ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-1ubuntu0.1"}]}],"versions":["5.1.4-3ubuntu1","5.1.9-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-2ubuntu0.1"}]}],"versions":["5.1.9-2build1","5.1.9-2build2"],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"giflib_project","product":"giflib"}],"references":[{"url":"https://github.com/verf1sh/Poc/blob/master/giflib_poc","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://github.com/verf1sh/Poc/blob/master/asan_report_giflib.png","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://sourceforge.net/p/giflib/bugs/159/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4CJSHXBD2RS5OJNWSHQZVMTQCCTIPYS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEAFUZXOOJJVFYRQM6IIJ7LMLEKCCESG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28506","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B4CJSHXBD2RS5OJNWSHQZVMTQCCTIPYS/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEAFUZXOOJJVFYRQM6IIJ7LMLEKCCESG/"},{"url":"https://github.com/advisories/GHSA-x77v-4m7v-7fgv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-28506","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-28506","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-28506","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0275.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30671","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/B4CJSHXBD2RS5OJNWSHQZVMTQCCTIPYS/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1723","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240786-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198880","tags":["report"]},{"url":"https://bugzilla.suse.com/1200551","tags":["report"]},{"url":"https://bugzilla.suse.com/1217390","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-48161","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242607-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214678","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39742","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-28506","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28506","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6824-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-40633","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39742","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-28506","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T12:53:01Z","modified":"2024-08-03T05:56:15.548Z","updated_at":"2026-11-02T14:34:39.233406Z"}],"euvd":[{"id":"EUVD-2022-32948","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T12:53:01Z","modified":"2024-08-03T05:56:15Z","updated_at":"2026-11-03T03:25:40.388857Z"}],"ghsa":[{"id":"GHSA-x77v-4m7v-7fgv","title":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-26T00:00:41Z","modified":"2023-01-28T05:06:19Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:44:25.398405Z"}],"nvd":[{"id":"CVE-2022-28506","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T13:15:49.727Z","modified":"2026-06-17T04:38:36.62Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:18.660414Z"}],"osv":[{"id":"ALPINE-CVE-2022-28506","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T13:15:49.727Z","modified":"2026-11-03T07:18:33.150360361Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-10305","title":"CVE-2022-28506 affecting package giflib for versions less than 5.2.1-7","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T13:15:49Z","modified":"2026-04-21T04:18:09.661489Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:00.508704Z"},{"id":"AZL-34727","title":"CVE-2022-28506 affecting package giflib for versions less than 5.2.1-7","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T13:15:49Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"BELL-CVE-2022-28506","title":"CVE-2022-28506 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:36.206165Z","modified":"2026-01-26T09:46:32.299396Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-28506","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T13:15:49.727Z","modified":"2026-04-16T04:39:06.762471623Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"DEBIAN-CVE-2022-28506","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T13:15:49.727Z","modified":"2026-11-03T08:03:51.324023814Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T08:23:57.167851Z"},{"id":"JLSEC-2026-817","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2026-07-30T15:01:04.165Z","modified":"2026-07-30T15:15:05.09425776Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2022-1723","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\r\n\r\nThere is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.(CVE-2022-28506)","status":"published","published":"2022-06-24T11:04:59Z","modified":"2026-08-18T01:16:00.177106861Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-28506","description":"There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.","status":"published","published":"2022-04-25T13:15:00Z","modified":"2026-04-22T13:21:11.37574Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"MGASA-2022-0275","title":"Updated mingw-giflib packages fix security vulnerability","description":"It was discovered that giflib 5.2.1 (including mingw-giflib which has\ngiflib 5.2.1 bundled) contained a heap-buffer-overflow in function\nDumpScreen2RGB() (CVE-2022-28506).\n","status":"published","published":"2022-08-05T21:00:44Z","modified":"2026-04-16T04:40:59.492859705Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"ROOT-OS-ALPINE-315-CVE-2022-28506","title":"CVE-2022-28506 in giflib - Patched by Root","description":"Root has patched CVE-2022-28506 in the giflib package for Root:Alpine:3.15. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:24:17Z","modified":"2026-09-29T10:16:06.951011236Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2024:0786-1","title":"Security update for giflib","description":"This update for giflib fixes the following issues:\n\nUpdate to version 5.2.2\n\n* Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)\n* #138 Documentation for obsolete utilities still installed\n* #139: Typo in 'LZW image data' page ('110_2 = 4_10')\n* #140: Typo in 'LZW image data' page ('LWZ')\n* #141: Typo in 'Bits and bytes' page ('filed')\n* Note as already fixed SF issue #143: cannot compile under mingw\n* #144: giflib-5.2.1 cannot be build on windows and other platforms using c89\n* #145: Remove manual pages installation for binaries that are not installed too\n* #146: [PATCH] Limit installed man pages to binaries, move giflib to section 7\n* #147 [PATCH] Fixes to doc/whatsinagif/ content\n* #148: heap Out of Bound Read in gif2rgb.c:298 DumpScreen2RGB\n* Declared no-info on SF issue #150: There is a denial of service vulnerability in GIFLIB 5.2.1\n* Declared Won't-fix on SF issue 149: Out of source builds no longer possible\n* #151: A heap-buffer-overflow in gif2rgb.c:294:45\n* #152: Fix some typos on the html documentation and man pages\n* #153: Fix segmentation faults due to non correct checking for args\n* #154: Recover the giffilter manual page\n* #155: Add gifsponge docs\n* #157: An OutofMemory-Exception or Memory Leak in gif2rgb\n* #158: There is a null pointer problem in gif2rgb\n* #159 A heap-buffer-overflow in GIFLIB5.2.1 DumpScreen2RGB() in gif2rgb.c:298:45\n* #163: detected memory leaks in openbsd_reallocarray giflib/openbsd-reallocarray.c\n* #164: detected memory leaks in GifMakeMapObject giflib/gifalloc.c\n* #166: a read zero page leads segment fault in getarg.c and memory leaks in gif2rgb.c and gifmalloc.c\n* #167: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function at Line 321 of gif2rgb.c\n","status":"published","published":"2024-03-06T20:07:22Z","modified":"2026-02-04T03:49:42.24352Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:2607-1","title":"Security update for giflib","description":"This update for giflib fixes the following issues:\n\n- CVE-2022-28506: Fixed heap buffer overflow in function DumpScreen2RGB() (bsc#1198880)\n- CVE-2023-39742: Fixed segmentation fault via the component getarg.c (bsc#1214678)\n","status":"published","published":"2024-07-25T21:52:04Z","modified":"2026-02-04T03:47:58.140302Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-6824-1","title":"giflib vulnerabilities","description":"It was discovered that GIFLIB incorrectly handled certain GIF files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2021-40633, CVE-2022-28506, CVE-2023-39742)\n","status":"published","published":"2024-06-10T14:27:14Z","modified":"2026-06-25T13:30:34.65562596Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}