ZeroDay Findings
Sign inSign up

Findings

CVE-2026-23868

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling.

Published Mar 10, 2026 · updated Jul 15, 2026 · giflib project giflib

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 10, 2026 · NIST NVD

    Detected

    Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

  2. Jul 15, 2026 · NIST NVD

    Updated

    Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

Affected

  • cpe giflib project/giflibversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-23868

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-23868

    Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

    nvd.nist.gov

References

CVE-2026-23868 · ZeroDay Findings