Medium severity5.1NVD Advisory· Published Mar 10, 2026· Updated Jul 15, 2026
CVE-2026-23868
CVE-2026-23868
Description
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:giflib_project:giflib:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:giflib_project:giflib:*:*:*:*:*:*:*:*range: >=5.0.0,<=6.1.1
- (no CPE)
- (no CPE)range: 5.0.0
- osv-coords7 versionspkg:rpm/almalinux/giflibpkg:rpm/almalinux/giflib-develpkg:rpm/opensuse/giflib&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/giflib&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/giflib&distro=openSUSE%20Tumbleweedpkg:rpm/suse/giflib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/giflib&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
< 5.2.1-24.el10_2+ 6 more
- (no CPE)range: < 5.2.1-24.el10_2
- (no CPE)range: < 5.2.1-24.el10_2
- (no CPE)range: < 5.2.2-150000.4.19.1
- (no CPE)range: < 5.2.2-160000.3.1
- (no CPE)range: < 5.2.2-3.1
- (no CPE)range: < 5.2.2-150000.4.19.1
- (no CPE)range: < 5.0.6-13.12.1
Patches
Vulnerability mechanics
References
27- sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.cnvdPatch
- www.facebook.com/security/advisories/cve-2026-23868nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2026:16008nvd
- access.redhat.com/errata/RHSA-2026:16009nvd
- access.redhat.com/errata/RHSA-2026:16030nvd
- access.redhat.com/errata/RHSA-2026:16174nvd
- access.redhat.com/errata/RHSA-2026:19154nvd
- access.redhat.com/errata/RHSA-2026:19367nvd
- access.redhat.com/errata/RHSA-2026:19724nvd
- access.redhat.com/errata/RHSA-2026:19725nvd
- access.redhat.com/errata/RHSA-2026:25096nvd
- access.redhat.com/errata/RHSA-2026:8858nvd
- access.redhat.com/errata/RHSA-2026:8859nvd
- access.redhat.com/errata/RHSA-2026:8861nvd
- access.redhat.com/errata/RHSA-2026:8883nvd
- access.redhat.com/errata/RHSA-2026:8884nvd
- access.redhat.com/errata/RHSA-2026:8885nvd
- access.redhat.com/errata/RHSA-2026:8886nvd
- access.redhat.com/errata/RHSA-2026:8887nvd
- access.redhat.com/errata/RHSA-2026:9290nvd
- access.redhat.com/errata/RHSA-2026:9291nvd
- access.redhat.com/errata/RHSA-2026:9292nvd
- access.redhat.com/errata/RHSA-2026:9294nvd
- access.redhat.com/errata/RHSA-2026:9295nvd
- access.redhat.com/security/cve/CVE-2026-23868nvd
- bugzilla.redhat.com/show_bug.cginvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23868.jsonnvd
News mentions
0No linked articles in our index yet.