ECHO-b401-d90a-c280
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-b401-d90a-c280.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-b401-d90a-c280
- Upstream
- Withdrawn
- 2025-10-28T12:41:16Z
- Published
- 2025-09-15T01:10:18Z
- Modified
- 2026-09-15T03:33:36Z
- Summary
- There is a way to crash the gif2rgb cli tool with bad arguments, that has no fix, but: 1. There is a warning in the man page https://man.archlinux.org/man/gif2rgb.1.en that bad input may core dump the tool, so it's up to the user to sanitize the input 2. It's in gif2rgb which is usually not installed. https://sourceforge.net/p/giflib/bugs/166/ https://security-tracker.debian.org/tracker/CVE-2023-39742
- Details
- References