What’s Vulnerable › Vulnerabilities

CVE-2026-26740

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-03-18 · updated 2026-07-23
• Weakness: CWE-787

Description

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.

Affected products

• giflib: 5.2.2

References

• https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflib_giftool_gce_len_heap_oobwrite_disclosure.md
• https://access.redhat.com/errata/RHSA-2026:33447
• https://access.redhat.com/errata/RHSA-2026:33450
• https://access.redhat.com/errata/RHSA-2026:33451
• https://access.redhat.com/errata/RHSA-2026:33452
• https://access.redhat.com/errata/RHSA-2026:33455
• https://access.redhat.com/errata/RHSA-2026:33456
• https://access.redhat.com/errata/RHSA-2026:33501
• https://access.redhat.com/errata/RHSA-2026:33502
• https://access.redhat.com/errata/RHSA-2026:33503
• https://access.redhat.com/errata/RHSA-2026:33509
• https://access.redhat.com/errata/RHSA-2026:36004

Get alerted when CVE-2026-26740 or the next vulnerability affects your stack