CVE-2025-31344 is a heap-based buffer overflow vulnerability in the giflib library, specifically in the gif2rgb utility. It can be triggered by a specially crafted GIF file, potentially leading to crashes or arbitrary code execution in applications that parse untrusted GIF images. The vulnerability has been publicly disclosed and a patch is available from upstream. WindowsForum.com discussions cover the technical details, affected versions, and mitigation steps such as updating giflib or applying workarounds. Users are advised to patch promptly, especially if their software processes GIF images from untrusted sources.
-
A heap‑based buffer overflow in the widely used giflib library — tracked as CVE‑2025‑31344 — has been publicly disclosed and fixed upstream after reports that the gif2rgb utility can be made to write past an allocated heap buffer when presented with a specially crafted GIF, creating crash and...