cve 2022 28506

CVE-2022-28506 is a heap-buffer-overflow vulnerability in giflib's gif2rgb utility, specifically in the DumpScreen2RGB function in gif2rgb.c. The flaw was reported in giflib version 5.2.1 and fixed in later upstream releases. Microsoft's MSRC advisory mapped this CVE to Azure Linux, but this mapping is a product-scoped attestation and does not guarantee that other Microsoft products are unaffected. The vulnerability is a classic memory-safety defect involving out-of-bounds heap read or write. Users and administrators should ensure their giflib installations are updated to a patched version to mitigate potential exploitation.