CVE-2020-23922

Out-of-bounds Read in conan/giflib

Identifiers

CVE-2020-23922

Package Slug

conan/giflib

Vulnerability

Out-of-bounds Read

Description

An issue was discovered in giflib DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.

Affected Versions

All versions up to 5.1.4

Solution

Upgrade to version 5.2.1 or above.

Last Modified

2021-05-03

source