Double free in giflib
Priority LOW 22CWE-415Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 26 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-415 and the CVSS impact.
Summary
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00174 6th percentileScored 2026-11-07
Fix Partial Red Hat: 22 advisoriesRed Hat: 26 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| giflib | giflib | 5.0.0 – 6.1.1 | — | No fix listed | CNA |
- giflib Vendorgiflib Affected 5.0.0 – 6.1.1 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:giflib_project:giflib:*:*:*:*:*:*:*:* | 5.0.0 – 6.1.1 | Vulnerable | Giflib Project |
- cpe:2.3:a:giflib_project:giflib:*:*:*:*:*:*:*:* Versions 5.0.0 – 6.1.1 Vulnerable ·Giflib Project
Remediation
Red Hat 22 advisories
- RHSA-2026:25096 Released 2026-06-10 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.2.2 (cuda)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:19725 Released 2026-05-20 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (ROCm)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:19724 Released 2026-05-20 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
Show 19 more Red Hat advisories
- RHSA-2026:19367 Released 2026-05-19 · Red Hat rating Importantgiflib update
- Red Hat Enterprise Linux AppStream (v. 9) giflib-5.2.1-10.el9_8.1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) giflib-devel-5.2.1-10.el9_8.1
- RHSA-2026:19154 Released 2026-05-19 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream (v. 10) giflib-5.2.1-24.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) giflib-devel-5.2.1-24.el10_2
- RHSA-2026:16174 Released 2026-05-12 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.3 (Spyre)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
- RHSA-2026:16030 Released 2026-05-11 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.3 (CUDA)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:16009 Released 2026-05-11 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.3 (ROCm)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:16008 Released 2026-05-11 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.3.3 (CUDA)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:9294 Released 2026-04-21 · Red Hat rating Importantgiflib security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) giflib-devel-5.2.1-9.el9_6.1
- Red Hat Enterprise Linux AppStream EUS (v.9.6) giflib-5.2.1-9.el9_6.1
- RHSA-2026:9295 Released 2026-04-21 · Red Hat rating Importantgiflib security update
- Red Hat CodeReady Linux Builder EUS (v.9.4) giflib-devel-5.2.1-9.el9_4.1
- Red Hat Enterprise Linux AppStream EUS (v.9.4) giflib-5.2.1-9.el9_4.1
- RHSA-2026:9292 Released 2026-04-21 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) giflib-5.2.1-9.el9_2.1
- RHSA-2026:9290 Released 2026-04-21 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) giflib-5.2.1-22.el10_0.1
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) giflib-devel-5.2.1-22.el10_0.1
- RHSA-2026:9291 Released 2026-04-21 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) giflib-5.2.1-9.el9_0.1
- RHSA-2026:8883 Released 2026-04-20 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux Server (v. 7 ELS) giflib-4.1.6-9.el7_9.1, giflib-4.1.6-9.el7_9.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) giflib-devel-4.1.6-9.el7_9.1, giflib-devel-4.1.6-9.el7_9.1.ppc, giflib-utils-4.1.6-9.el7_9.1
- RHSA-2026:8887 Released 2026-04-20 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) giflib-5.1.4-3.el8_6.1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) giflib-5.1.4-3.el8_6.1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) giflib-5.1.4-3.el8_6.1
- RHSA-2026:8861 Released 2026-04-20 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream (v. 8) giflib-5.1.4-4.el8_10
- Red Hat Enterprise Linux CRB (v. 8) giflib-devel-5.1.4-4.el8_10
- RHSA-2026:8859 Released 2026-04-20 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream (v. 9) giflib-5.2.1-9.el9_7.1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) giflib-devel-5.2.1-9.el9_7.1
- RHSA-2026:8885 Released 2026-04-20 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) giflib-5.1.4-3.el8_4.1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) giflib-5.1.4-3.el8_4.1
- RHSA-2026:8886 Released 2026-04-20 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) giflib-5.1.4-3.el8_8.1
- Red Hat Enterprise Linux AppStream TUS (v.8.8) giflib-5.1.4-3.el8_8.1
- RHSA-2026:8858 Released 2026-04-20 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream (v. 10) giflib-5.2.1-22.el10_1.1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) giflib-devel-5.2.1-22.el10_1.1
- RHSA-2026:8884 Released 2026-04-20 · Red Hat rating Importantgiflib security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) giflib-5.1.4-3.el8_2.1
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat AI Inference Server 3.2 | Fixed | RHSA-2026:19724, RHSA-2026:19725, RHSA-2026:25096 |
| Red Hat AI Inference Server 3.3 | Fixed | RHSA-2026:16008, RHSA-2026:16009, RHSA-2026:16030, RHSA-2026:16174 |
| Red Hat CodeReady Linux Builder EUS (v.9.4) | Fixed | RHSA-2026:9295 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:9294 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:19154, RHSA-2026:8858 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:8861 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:19367, RHSA-2026:8859 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2026:8884 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:8885 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:8887 |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Fixed | RHSA-2026:8887 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:8886 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2026:9291 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:9292 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:9290 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:9295 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:9294 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:8885 |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Fixed | RHSA-2026:8887 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:8886 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:8861 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:19154, RHSA-2026:8858 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:19367, RHSA-2026:8859 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:9290 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:8883 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2026:8883 |
Timeline
- 2026-10-02 Threatist record created from CVE-2026-23868
- 2026-10-03 Alias added: GHSA-hq9h-682q-jg37
References
More Giflib Project Giflib vulnerabilities
- TI-2026-21378 Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a… CVSS 3.1HIGH 8.2
- TI-2024-30864 Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb. CVSS 3.1MEDIUM 6.5
- TI-2023-20770 giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. CVSS 3.1MEDIUM 5.5
- TI-2016-02665 Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2… CVSS 3.0CRITICAL 9.8
- TI-2018-08211 The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as… CVSS 3.1HIGH 8.8
- TI-2018-08210 The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as… CVSS 3.1HIGH 8.8
Sources
- CVE-2026-23868 · CVE Program
- CVE-2026-23868 · NVD
- FIRST EPSS
- GHSA-hq9h-682q-jg37 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-23868 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences