CVE-2022-28506 There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in GIFLIB Affecting Remote Systems Two vulnerabilities have been reported in GIFLIB, affecting versions 5.1.4 and 5.2.1. CVE-2021-40633 involves a memory leak in gif2rgb that can lead to denial of service, while CVE-2022-28506 is a heap-buffer-overflow in the same function that could potentially allow for exploitation. Both vulnerabilities could impact systems processing GIF files. 2 sources 39