{"id":"CVE-2023-39742","aliases":["ALPINE-CVE-2023-39742","AZL-28091","AZL-34728","BELL-CVE-2023-39742","CLSA-2026-1776697883","DEBIAN-CVE-2023-39742","EUVD-2023-43442","GHSA-29c8-646j-hvw9","JLSEC-2026-818","MGASA-2023-0278","OESA-2023-1675","SUSE-SU-2024:2607-1","SUSE-SU-2026:1005-1","UBUNTU-CVE-2023-39742","USN-6824-1"],"status":"published","title":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00346,"percentile":0.2858,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-08-25T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"giflib","fixed_in":["5.2.1-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"giflib","fixed_in":["5.2.1-8"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"giflib","fixed_in":["5.2.2-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib","fixed_in":["5.2.1-9.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib-devel","fixed_in":["5.2.1-9.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib-utils","fixed_in":["5.2.1-9.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Julia","package":"Giflib_jll","fixed_in":["5.2.2+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"giflib","fixed_in":["5.2.1-5.2.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"giflib","fixed_in":["5.2.1-7.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"giflib","fixed_in":["5.2.1-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"giflib","fixed_in":["5.2.1-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"giflib","fixed_in":["5.2.1-7.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"giflib","fixed_in":["5.2.1-7.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"giflib","fixed_in":["5.2.1-7.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"giflib","fixed_in":["5.1.4-0.3~16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"giflib","fixed_in":["5.1.4-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"giflib","fixed_in":["5.1.9-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-8"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.1-r2"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.1-r5"},{"fixed":"5.2.2-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1-2.5","5.2.1-2.5+deb12u1","5.2.2-1","6.1.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.2-1","5.2.2-1+deb13u1","6.1.3-1"]},{"source":"osv","ecosystem":"Debian:14","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.2-1","6.1.3-1"]},{"source":"osv","ecosystem":"Julia","package":"Giflib_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"5.2.1+0"},{"fixed":"5.2.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-5.2.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-7.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-7.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-7.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-7.oe2203sp2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-13.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-13.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-13.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-13.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-0.3~16.04.1+esm1"}]}],"versions":["4.1.6-11","5.1.1-0ubuntu1","5.1.1-0.1","5.1.1-0.2","5.1.2-0.1","5.1.2-0.2","5.1.4-0.3~16.04","5.1.4-0.3~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+esm1"}]}],"versions":["5.1.4-1","5.1.4-2","5.1.4-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-1ubuntu0.1"}]}],"versions":["5.1.4-3ubuntu1","5.1.9-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-0.3~16.04.1+esm1"}]}],"versions":["4.1.6-11","5.1.1-0ubuntu1","5.1.1-0.1","5.1.1-0.2","5.1.2-0.1","5.1.2-0.2","5.1.4-0.3~16.04","5.1.4-0.3~16.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+esm1"}]}],"versions":["5.1.4-1","5.1.4-2","5.1.4-2ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-1ubuntu0.1"}]}],"versions":["5.1.4-3ubuntu1","5.1.9-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-2ubuntu0.1"}]}],"versions":["5.1.9-2build1","5.1.9-2build2"],"bundled":3}],"products":[{"vendor":"giflib_project","product":"giflib"}],"references":[{"url":"https://sourceforge.net/p/giflib/bugs/166/","tags":["x_transferred","Exploit","Issue Tracking","report","web"]},{"url":"https://gist.github.com/huanglei3/ec9090096aa92445cf0a8baa8e929084","tags":["x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4RLSFGPBPR3FMIUJCWPGVIYIU35YGQX/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5WO6WL2TCGO6T4VKGACDIVSZI74WJAU/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPNBOB65TEA4ZEPLVENI26BY4LEX7TEF/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39742","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4RLSFGPBPR3FMIUJCWPGVIYIU35YGQX"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPNBOB65TEA4ZEPLVENI26BY4LEX7TEF"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5WO6WL2TCGO6T4VKGACDIVSZI74WJAU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O4RLSFGPBPR3FMIUJCWPGVIYIU35YGQX"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPNBOB65TEA4ZEPLVENI26BY4LEX7TEF"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T5WO6WL2TCGO6T4VKGACDIVSZI74WJAU"},{"url":"https://sourceforge.net/p/giflib/bugs/166"},{"url":"https://github.com/advisories/GHSA-29c8-646j-hvw9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-39742","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-39742","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776697883.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-39742","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0278.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39742","tags":["advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O4RLSFGPBPR3FMIUJCWPGVIYIU35YGQX/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1675","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242607-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198880","tags":["report"]},{"url":"https://bugzilla.suse.com/1214678","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39742","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261005-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259502","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23868","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-39742","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6824-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-40633","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28506","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-39742","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T00:00:00Z","modified":"2024-10-02T16:35:30.415Z","updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-43442","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T00:00:00Z","modified":"2024-10-02T16:35:30Z","updated_at":"2026-11-03T00:27:57.212945Z"}],"ghsa":[{"id":"GHSA-29c8-646j-hvw9","title":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T15:32:39Z","modified":"2024-04-11T21:06:17Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:57:06.932158Z"}],"nvd":[{"id":"CVE-2023-39742","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T14:15:09.763Z","modified":"2026-06-17T06:12:50.6Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:25.025396Z"}],"osv":[{"id":"ALPINE-CVE-2023-39742","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T14:15:09.763Z","modified":"2026-10-26T17:17:58.637435719Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-28091","title":"CVE-2023-39742 affecting package giflib for versions less than 5.2.1-8","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T14:15:09Z","modified":"2026-04-21T04:25:49.601532Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-34728","title":"CVE-2023-39742 affecting package giflib for versions less than 5.2.1-8","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T14:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"BELL-CVE-2023-39742","status":"published","published":"2023-08-25T14:15:00Z","modified":"2026-01-26T09:33:33.74906Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-39742","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T14:15:09.763Z","modified":"2026-04-16T04:39:21.21803122Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DEBIAN-CVE-2023-39742","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T14:15:09.763Z","modified":"2026-10-26T18:00:12.131657986Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"JLSEC-2026-818","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2026-07-30T15:01:04.165Z","modified":"2026-07-30T15:15:05.067450494Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2023-1675","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\r\n\r\ngiflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.(CVE-2023-39742)","status":"published","published":"2023-09-22T11:06:07Z","modified":"2026-08-18T01:17:53.628035763Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"UBUNTU-CVE-2023-39742","description":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.","status":"published","published":"2023-08-25T14:15:00Z","modified":"2026-04-22T14:10:35.014175Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"CLSA-2026-1776697883","title":"giflib: Fix of CVE-2023-39742","description":"- CVE-2023-39742: fix segfault in getarg.c","status":"published","published":"2026-04-20T15:11:28Z","modified":"2026-06-01T00:32:47.435106912Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"MGASA-2023-0278","title":"Updated giflib packages fix security vulnerability","description":"The updated packages fix a security vulnerability:\n\ngiflib v5.2.1 was discovered to contain a segmentation fault via the\ncomponent getarg.c. (CVE-2023-39742)\n","status":"published","published":"2023-09-30T19:15:40Z","modified":"2026-05-30T05:15:04.459003633Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2024:2607-1","title":"Security update for giflib","description":"This update for giflib fixes the following issues:\n\n- CVE-2022-28506: Fixed heap buffer overflow in function DumpScreen2RGB() (bsc#1198880)\n- CVE-2023-39742: Fixed segmentation fault via the component getarg.c (bsc#1214678)\n","status":"published","published":"2024-07-25T21:52:04Z","modified":"2026-02-04T03:47:58.140302Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2026:1005-1","title":"Security update for giflib","description":"This update for giflib fixes the following issues:\n\n- CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).\n","status":"published","published":"2026-03-25T09:32:48Z","modified":"2026-03-26T09:00:20.299683Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"USN-6824-1","title":"giflib vulnerabilities","description":"It was discovered that GIFLIB incorrectly handled certain GIF files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2021-40633, CVE-2022-28506, CVE-2023-39742)\n","status":"published","published":"2024-06-10T14:27:14Z","modified":"2026-06-25T13:30:34.65562596Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}