Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses
Filter by:
With package: giflib

Found 2 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-23868
created 1 month, 1 week ago
Giflib contains a double-free vulnerability that is the result of …

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

Affected products

giflib
  • =<6.1.1

Matching in nixpkgs

pkgs.giflib

Library for reading and writing gif images

Untriaged
Permalink CVE-2025-31344
7.3 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): LOW
  • Availability impact (A): HIGH
created 1 year ago
The giflib open-source component has a buffer overflow vulnerability

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.

Affected products

giflib
  • =<5.2.2

Matching in nixpkgs

pkgs.giflib

Library for reading and writing gif images