ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIBNOFILE mode, GetByteStr() copy memory buffer without checking the boundary.