CVE-2026-26740
CVSS Score
8.2
EPSS Score
0.6%
EPSS Percentile
46th
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.
| Vendor | n/a |
| Product | n/a |
| Published | Mar 18, 2026 |
| Last Updated | Jul 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new high vulnerabilities affecting n/a n/a are published โ delivered to Slack, Telegram or Discord.
Get Free Alerts โ
Free ยท No credit card ยท 60 sec setup
Affected Versions
n/a / n/a
n/a
References
github.com: https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflib_giftool_gce_len_heap_oobwrite_disclosure.md access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-26740 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2448747 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26740.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33447 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9689 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9693 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33502 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33503 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9683 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9686 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33450 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33455 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33456 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33509 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33452 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33451 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33501 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36004 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36005 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36006