CVE-2026-23868

Publish date: March 15, 2026
Severity
High
CVSS score
5.1
Package
giflib
Affected versions
>= 5.2.1-2.5, < 5.2.2-1+e2

Giflib contains a double-free vulnerability caused by a shallow copy in the GifMakeSavedImage function and improper error handling. The conditions required to exploit this vulnerability are challenging to meet, but exploitation may still be feasible.