CVE-2017-18120: Lcdf Gifsicle

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because last_name is mishandled, a different vulnerability than CVE-2017-1000421.

Affected products

• Lcdf Gifsicle: version 1.90 only

Published 2018-02-02. Last modified 2026-06-17.