https://www.cve.org/CVERecord?id=CVE-2025-31344
In the function DumpScreen2RGB of the giflib software, an attempt is made to access the color map through
ColorMapEntry. The size of ColorMap is 6 bytes (from 0x602000000030 to 0x602000000036). However, when accessing
ColorMap->Colors[GifRow[j]], the value of GifRow[j] exceeds the actual number of colors stored. The address pointed to
by ColorMapEntry, 0x602000000039, goes beyond the allocated memory range for color data. As a result, accessing
ColorMapEntry->Red leads to out-of-bounds access, causing a heap-buffer-overflow.
Fix pushed.