CLSA-2026-1787646995
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787646995.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787646995
- Upstream
CVE (3)
- CVE-2020-23922
- CVE-2021-40633
- CVE-2026-23868
- Published
- 2026-08-25T08:36:48Z
- Modified
- 2026-10-26T09:30:42Z
- Summary
- Fix CVE(s): CVE-2020-23922, CVE-2021-40633, CVE-2026-23868
- Details
-
- SECURITY UPDATE: heap buffer over-read in gif2rgb
- debian/patches/CVE-2020-23922.patch: bound each pixel index against the active color table before indexing ColorMap->Colors in DumpScreen2RGB in util/gif2rgb.c.
- CVE-2020-23922
- SECURITY UPDATE: memory leak leading to denial of service
- debian/patches/CVE-2021-40633.patch: free every ScreenBuffer row, not just the row-pointer array, at the end of GIF2RGB in util/gif2rgb.c.
- CVE-2021-40633
- SECURITY UPDATE: double free in GifMakeSavedImage
- debian/patches/CVE-2026-23868.patch: null out the heap pointers aliased by the shallow copy of CopyFrom, test the source record when deciding what to deep-copy, and restore ExtensionBlockCount after the extension blocks are copied, in lib/gifalloc.c.
- CVE-2026-23868
- SECURITY UPDATE: heap buffer over-read in gif2rgb
- References
Affected packages
TuxCare:Ubuntu:18.04 / giflib-tools
Package
- Name
- giflib-tools
- Purl
- pkg:deb/tuxcare/giflib-tools?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libgif-dev
Package
- Name
- libgif-dev
- Purl
- pkg:deb/tuxcare/libgif-dev?distro=ubuntu-18.04