Medium severity5.5NVD Advisory· Published Apr 21, 2016· Updated May 6, 2026
CVE-2016-3977
CVE-2016-3977
Description
Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- sourceforge.net/p/giflib/bugs/87/nvdPatch
- sourceforge.net/p/giflib/code/ci/ea8dbc5786862a3e16a5acfa3d24e2c2f608cd88/nvdPatchVendor Advisory
- bugs.fi/fuzzing/index.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-04/msg00079.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-04/msg00084.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-05/msg00019.htmlnvd
- www.securityfocus.com/bid/88103nvd
- bugzilla.redhat.com/show_bug.cginvd
- usn.ubuntu.com/4107-1/nvd
News mentions
0No linked articles in our index yet.