CVE-2020-23922

A flaw was found in giflib. A missing check in function DumpScreen2RGB in gif2rgb.c leads to an out-of-bounds read, allowing an attacker to crash the gif2rgb tool. The issue is not in the giflib library, but in the gif2rgb utility program.

This Moderate impact flaw affects the gif2rgb utility, not the giflib library. A missing bounds check in 'DumpScreen2RGB()' can lead to an out-of-bounds read when processing a crafted GIF file, causing the tool to crash. Exploitation requires local access and user interaction.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.