Bug 918539 (CVE-2023-48161)

Summary:	media-libs/giflib: buffer overflow
Product:	Gentoo Security	Reporter:	Christopher Fore <csfore>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	codec
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	A3 [upstream]
Package list:		Runtime testing required:	---

Description Christopher Fore 2023-11-25 17:40:53 UTC

CVE-2023-48161 (https://github.com/tacetool/TACE#cve-2023-48161):

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c

Comment 1 John Helmert III archtester

2023-11-25 19:39:19 UTC

Is there an upstream report?

Comment 2 Christopher Fore 2023-11-25 19:41:42 UTC

Yes, sorry, I wasn't sure which to use since they were both linked in the CVE

https://sourceforge.net/p/giflib/bugs/167/