azure linux giflib vulnerabilities

Latest azure linux giflib CVEs

Newest publication first

1. CVE-2026-23868 Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult bu...

   Published 2026-03-10

   High·CVSS 7.0 EPSS 0.17%

   Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

2. CVE-2025-31344 The giflib open-source component has a buffer overflow vulnerability

   Published 2025-04-14

   High·CVSS 7.3 EPSS 0.27%

   Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.