CVE-2026-23868: Giflib Project Giflib

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

Affected products

• Giflib Project Giflib: from 5.0.0, up to and including 6.1.1

Published 2026-03-10. Last modified 2026-07-15.