CVE-2021-40633 A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in GIFLIB Affecting Remote Systems Two vulnerabilities have been reported in GIFLIB, affecting versions 5.1.4 and 5.2.1. CVE-2021-40633 involves a memory leak in gif2rgb that can lead to denial of service, while CVE-2022-28506 is a heap-buffer-overflow in the same function that could potentially allow for exploitation. Both vulnerabilities could impact systems processing GIF files. 2 sources 39

Extracted Entities

Attack Types (1)

CVEs (1)