CVE-2021-45907 (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002669): An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted. CVE-2021-45908 (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002669): An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted. CVE-2021-45909 (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002668): An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer. CVE-2021-45910 (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002667): An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the allocated buffer. The attacker has control over a part of the address that data is written to, control over the written data, and (to some extent) control over the amount of data that is written. CVE-2021-45911 (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002687): An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside the boundaries of the buffer.
