[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <c91c769394051f886c25f8bf895ec770dce36a73.04827fe8.a43c.41dd.9fe9.7f451462d2d9@feishu.cn>
Date: Mon, 07 Apr 2025 21:15:25 +0800
From: 李亚杰 <liyajie@...neuler.sh>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: CVE-2025-31344: giflib: The giflib open-source component has a buffer overflow vulnerability.
Affected Versions:
- giflib 5.2.2 and below
Description:
In the function DumpScreen2RGB of the giflib software, an attempt is made to access the color map through ColorMapEntry. The size of ColorMap is 6 bytes (from 0x602000000030 to 0x602000000036). However, when accessing ColorMap->Colors[GifRow[j]], the value of GifRow[j] exceeds the actual number of colors stored. The address pointed to by ColorMapEntry, 0x602000000039, goes beyond the allocated memory range for color data. As a result, accessing ColorMapEntry->Red leads to out-of-bounds access, causing a heap-buffer-overflow.
Credits:
JiaXuan Song(m202372152@...t.edu.cn)
bale.cen(cenxianlong@...wei.com)
Best Regards,
Yajie Li
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
