Menu

#187 CVE-2025-31344

v1.0_(example)
closed
nobody
None
1
2026-02-18
2025-04-29
No

https://www.cve.org/CVERecord?id=CVE-2025-31344

In the function DumpScreen2RGB of the giflib software, an attempt is made to access the color map through
ColorMapEntry. The size of ColorMap is 6 bytes (from 0x602000000030 to 0x602000000036). However, when accessing
ColorMap->Colors[GifRow[j]], the value of GifRow[j] exceeds the actual number of colors stored. The address pointed to
by ColorMapEntry, 0x602000000039, goes beyond the allocated memory range for color data. As a result, accessing
ColorMapEntry->Red leads to out-of-bounds access, causing a heap-buffer-overflow.

Discussion

  • Eric S. Raymond

    Eric S. Raymond - 2026-02-18

    Fix pushed.

     
  • Eric S. Raymond

    Eric S. Raymond - 2026-02-18
    • status: open --> closed
     

Log in to post a comment.

MongoDB Logo MongoDB