CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-24221
https://notcve.org/view.php?id=CVE-2020-24221
An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .gif file (infinite loop). • https://github.com/miniupnp/ngiflib/issues/17 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-39113
https://notcve.org/view.php?id=CVE-2023-39113
ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga. • https://github.com/miniupnp/ngiflib/issues/27 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-39114
https://notcve.org/view.php?id=CVE-2023-39114
ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif. • https://github.com/miniupnp/ngiflib/issues/29 •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 2CVE-2022-30858
https://notcve.org/view.php?id=CVE-2022-30858
An issue was discovered in ngiflib 0.4. There is SEGV in SDL_LoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CA_file2_0 • https://github.com/Marsman1996/pocs/blob/master/ngiflib/CVE-2022-30858/README.md https://github.com/miniupnp/ngiflib/issues/22 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-36530
https://notcve.org/view.php?id=CVE-2021-36530
ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary. ngiflib versión 0.4, presenta un desbordamiento de la pila en la función GetByteStr() en el archivo ngiflib.c:108 en modo NGIFLIB_NO_FILE, la función GetByteStr() copia el buffer de memoria sin comprobar el límite. • https://github.com/miniupnp/ngiflib/issues/19 • CWE-787: Out-of-bounds Write •