CVE-2026-23868

5.1 MEDIUM

Published: March 10, 2026 Modified: March 11, 2026

Description

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7

Source: cve-assign@fb.com

https://www.facebook.com/security/advisories/cve-2026-23868

Source: cve-assign@fb.com

2 reference(s) from NVD

Quick Stats

CVSS v3 Score

5.1 / 10.0

EPSS (Exploit Probability)

0.0%

4th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-415

Related CVEs