CVE-2016-3977: Giflib Project Giflib

Medium severity, CVSS 5.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.

Affected products

• Giflib Project Giflib: up to and including 5.1.2
• Opensuse Opensuse: version 13.2 only

Published 2016-04-21. Last modified 2026-06-17.