CVE-2020-23922 in Giflibproject and Apache Products
Published on April 21, 2021
An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.
Products Associated with CVE-2020-23922
stack.watch emails you whenever new vulnerabilities are published in Giflibproject Giflib or Apache Bookkeeper. Just hit a watch button to start following.
Exploit Probability
EPSS
3.79%
Percentile
87.84%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.