CVE-2026-23868
CVSS Score
5.1
EPSS Score
0.1%
EPSS Percentile
4th
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.
| Vendor | giflib |
| Product | giflib |
| Published | Mar 10, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for giflib giflib
Be the first to know when new medium vulnerabilities affecting giflib giflib are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
giflib / giflib
5.0.0 ≤ 6.1.1
References
facebook.com: https://www.facebook.com/security/advisories/cve-2026-23868 sourceforge.net: https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-23868 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2446207 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23868.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8883 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9290 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8858 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19154 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8861 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8884 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8885 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8887 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8886 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9291 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9292 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9295 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9294 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8859 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19367 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25096 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19724 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19725 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16008 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16030 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16009 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16174