CVE-2026-23868

MEDIUM5.1

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling

Published Mar 10, 2026

Modified 1 months ago

Details

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

References

WEB

https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-23868

WEB

https://www.facebook.com/security/advisories/cve-2026-23868

CVSS Analysis

CVSS v3.1

5.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedMar 10, 2026

ModifiedMar 11, 2026