What’s Vulnerable › Vulnerabilities

CVE-2020-19752

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-07 · updated 2026-06-17
• Weakness: CWE-476

Description

The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.

Affected products

• Fedoraproject Fedora: 33, 34
• Lcdf Gifsicle: 1.92

References

• https://github.com/kohler/gifsicle/issues/140
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7H3ASG2BD4D4SAUUI6TOLUZYP2QYYHXY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DH7X7PGUN5BYXKW533DAX4KAEM4HPMJC/
• https://github.com/kohler/gifsicle/issues/140
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7H3ASG2BD4D4SAUUI6TOLUZYP2QYYHXY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DH7X7PGUN5BYXKW533DAX4KAEM4HPMJC/

Get alerted when CVE-2020-19752 or the next vulnerability affects your stack