CVE-2023-39114

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.27% chance of exploitation in the next 30 days, 19th percentile

Published

2023-08-02

Updated

2024-10-17

Proof-of-concept exploits (1)

• miniupnp/ngiflib/issues/29

References

• CVE Record
• NVD entry

Related

• CVE-2018-11578
• CVE-2019-16346
• CVE-2019-19011
• CVE-2019-20219
• CVE-2020-24221
• CVE-2021-36530