Vulnerability Details CVE-2023-44821
Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect Gif_Realloc calls, might allow a denial of service (memory consumption). NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arrives for a long-running process, does not ship with functionality to link it into another application as a library, and does not have realistic use cases in which an adversary controls the entire command line.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.2%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2023-44821
-
cpe:2.3:a:lcdf:gifsicle:1.10
-
cpe:2.3:a:lcdf:gifsicle:1.11
-
cpe:2.3:a:lcdf:gifsicle:1.11.1
-
cpe:2.3:a:lcdf:gifsicle:1.14.1
-
cpe:2.3:a:lcdf:gifsicle:1.15
-
cpe:2.3:a:lcdf:gifsicle:1.18
-
cpe:2.3:a:lcdf:gifsicle:1.19
-
cpe:2.3:a:lcdf:gifsicle:1.21
-
cpe:2.3:a:lcdf:gifsicle:1.22
-
cpe:2.3:a:lcdf:gifsicle:1.24
-
cpe:2.3:a:lcdf:gifsicle:1.25
-
cpe:2.3:a:lcdf:gifsicle:1.26
-
cpe:2.3:a:lcdf:gifsicle:1.30
-
cpe:2.3:a:lcdf:gifsicle:1.35
-
cpe:2.3:a:lcdf:gifsicle:1.37
-
cpe:2.3:a:lcdf:gifsicle:1.38
-
cpe:2.3:a:lcdf:gifsicle:1.39
-
cpe:2.3:a:lcdf:gifsicle:1.40
-
cpe:2.3:a:lcdf:gifsicle:1.42
-
cpe:2.3:a:lcdf:gifsicle:1.43
-
cpe:2.3:a:lcdf:gifsicle:1.44
-
cpe:2.3:a:lcdf:gifsicle:1.45
-
cpe:2.3:a:lcdf:gifsicle:1.46
-
cpe:2.3:a:lcdf:gifsicle:1.47
-
cpe:2.3:a:lcdf:gifsicle:1.48
-
cpe:2.3:a:lcdf:gifsicle:1.50
-
cpe:2.3:a:lcdf:gifsicle:1.51
-
cpe:2.3:a:lcdf:gifsicle:1.52
-
cpe:2.3:a:lcdf:gifsicle:1.53
-
cpe:2.3:a:lcdf:gifsicle:1.54
-
cpe:2.3:a:lcdf:gifsicle:1.55
-
cpe:2.3:a:lcdf:gifsicle:1.56
-
cpe:2.3:a:lcdf:gifsicle:1.57
-
cpe:2.3:a:lcdf:gifsicle:1.58
-
cpe:2.3:a:lcdf:gifsicle:1.59
-
cpe:2.3:a:lcdf:gifsicle:1.60
-
cpe:2.3:a:lcdf:gifsicle:1.61
-
cpe:2.3:a:lcdf:gifsicle:1.62
-
cpe:2.3:a:lcdf:gifsicle:1.63
-
cpe:2.3:a:lcdf:gifsicle:1.64
-
cpe:2.3:a:lcdf:gifsicle:1.65
-
cpe:2.3:a:lcdf:gifsicle:1.66
-
cpe:2.3:a:lcdf:gifsicle:1.67
-
cpe:2.3:a:lcdf:gifsicle:1.68
-
cpe:2.3:a:lcdf:gifsicle:1.69
-
cpe:2.3:a:lcdf:gifsicle:1.70
-
cpe:2.3:a:lcdf:gifsicle:1.71
-
cpe:2.3:a:lcdf:gifsicle:1.72
-
cpe:2.3:a:lcdf:gifsicle:1.73
-
cpe:2.3:a:lcdf:gifsicle:1.74
-
cpe:2.3:a:lcdf:gifsicle:1.75
-
cpe:2.3:a:lcdf:gifsicle:1.76
-
cpe:2.3:a:lcdf:gifsicle:1.77
-
cpe:2.3:a:lcdf:gifsicle:1.78
-
cpe:2.3:a:lcdf:gifsicle:1.79
-
cpe:2.3:a:lcdf:gifsicle:1.80
-
cpe:2.3:a:lcdf:gifsicle:1.81
-
cpe:2.3:a:lcdf:gifsicle:1.82
-
cpe:2.3:a:lcdf:gifsicle:1.83
-
cpe:2.3:a:lcdf:gifsicle:1.84
-
cpe:2.3:a:lcdf:gifsicle:1.85
-
cpe:2.3:a:lcdf:gifsicle:1.86
-
cpe:2.3:a:lcdf:gifsicle:1.87
-
cpe:2.3:a:lcdf:gifsicle:1.88
-
cpe:2.3:a:lcdf:gifsicle:1.89
-
cpe:2.3:a:lcdf:gifsicle:1.90
-
cpe:2.3:a:lcdf:gifsicle:1.91
-
cpe:2.3:a:lcdf:gifsicle:1.92
-
cpe:2.3:a:lcdf:gifsicle:1.93
-
cpe:2.3:a:lcdf:gifsicle:1.94