CVE-2026-26740

HIGH

giflib 5.2.2 - Denial of Service via EGifGCBToExtension Graphic Control Extension Overwrite

Title source: llm
STIX 2.1

Description

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.

References (21)

Core 21
Core References

Scores

CVSS v3 8.2
EPSS 0.0062
EPSS Percentile 46.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-787
Status published
Products (1)
giflib_project/giflib 5.2.2
Published Mar 18, 2026
Tracked Since Mar 19, 2026