Log in Start free

Vulnerability · Published Mar 27, 2026 · Assigned by VulDB

CVE-2026-4985dloebl CGIF GIF Image cgif.c cgif_addframe integer overflow

Medium 4.3

In plain English

A medium-severity integer overflow in CGIF from dloebl. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.5%top 56.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function cgif_addframe of the file src/cgif.c of the component GIF Image Handler. The manipulation of the argument width/height leads to integer overflow. The attack may be initiated remotely. The identifier of the patch is b0ba830093f4317a5d1f345715d2fa3cd2dab474. It is suggested to install a patch to address this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12cgifno fix listedDEBIAN-CVE-2026-4985
Debian:13cgifno fix listedDEBIAN-CVE-2026-4985
Debian:14cgif0.5.3-1DEBIAN-CVE-2026-4985
Ubuntu:22.04:LTScgifno fix listedUBUNTU-CVE-2026-4985
Ubuntu:24.04:LTScgifno fix listedUBUNTU-CVE-2026-4985
Ubuntu:25.10cgifno fix listedUBUNTU-CVE-2026-4985
Ubuntu:26.04:LTScgifno fix listedUBUNTU-CVE-2026-4985
Ubuntu:26.10cgifno fix listedUBUNTU-CVE-2026-4985

Affected products (as reported)

VendorProductVersions
dloebl CGIF 0.5.00.5.10.5.2

Weakness: CWE-190, CWE-189 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C

References