Skip to content
8.2 High

CVE-2026-26740 Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the…

Description

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.

Affected products and versions

Product Affected versions Fixed in
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat build of OpenJDK 1.8 Versions not published
Red Hat build of OpenJDK 11 ELS Versions not published
Red Hat build of OpenJDK 17 Versions not published
Red Hat build of OpenJDK 21 Versions not published
Red Hat build of OpenJDK 25 Versions not published
Show the 36 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux 7 Versions not published
n/a Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 8) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.2) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) Versions not published
Red Hat Enterprise Linux CRB (v. 8) Versions not published
Red Hat CodeReady Linux Builder EUS (v.9.6) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) Versions not published
Red Hat AI Inference Server 3.2 1782951244 earliest → < 1782951244 1782951244
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
Red Hat Enterprise Linux 8.2 Advanced Update Support Versions not published
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Extended Update Support Versions not published

References

Timeline

  1. Published
  2. Last modified
The 1454 CVEs of Red Hat Enterprise Linux 10 →
Track this CVE