Skip to content
Fencer Vulns
high 7.1

CVE-2023-48161 json

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2R…

published 2023-11-22 2 y ago modified 2026-10-08 31 d ago also EUVD-2023-52241 , JLSEC-2026-819

cvss
7.1
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 37%
public exploits
0
none known

Summary

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c

Patch / fix

  • julia Giflib_jll 5.2.2+0
  • giflib Debian 14, Debian 13 5.2.2-1

debian advisories DEBIAN-CVE-2023-48161

  • java-1.8.0-openjdk RHEL 8.8 EUS, RHEL 8 1:1.8.0.432.b06-2.el8
  • java-1.8.0-openjdk RHEL 9.2 EUS, RHEL 9 1:1.8.0.432.b06-2.el9
  • java-1.8.0-openjdk-src RHEL 8.8 EUS, RHEL 8 1:1.8.0.432.b06-2.el8
  • java-1.8.0-openjdk-src RHEL 9.2 EUS, RHEL 9 1:1.8.0.432.b06-2.el9
  • java-17-openjdk RHEL 8.8 EUS, RHEL 8 1:17.0.13.0.11-3.el8
  • java-17-openjdk RHEL 9.2 EUS, RHEL 9 1:17.0.13.0.11-3.el9
  • java-17-openjdk-src RHEL 8.8 EUS, RHEL 8 1:17.0.13.0.11-3.el8
  • java-17-openjdk-src RHEL 9.2 EUS, RHEL 9 1:17.0.13.0.11-3.el9

red hat advisories RHSA-2024:8116RHSA-2024:8117RHSA-2024:8124RHSA-2024:8127RHSA-2024:8121RHSA-2024:8120

  • giflib SLES for SAP 15 SP4, SLES for SAP 15 SP3, SLES for SAP 15 SP2 +12 more 5.2.2-150000.4.13.1

suse advisories SUSE-SU-2024:0786-1

  • giflib openSUSE Tumbleweed 5.2.2-1.1

opensuse advisories openSUSE-SU-2024:13723-1

  • java-1.8.0-openjdk AlmaLinux 8 1:1.8.0.432.b06-2.el8
  • java-1.8.0-openjdk AlmaLinux 9 1:1.8.0.432.b06-2.el9
  • java-1.8.0-openjdk-src AlmaLinux 8 1:1.8.0.432.b06-2.el8
  • java-1.8.0-openjdk-src AlmaLinux 9 1:1.8.0.432.b06-2.el9
  • java-1.8.0-openjdk-demo AlmaLinux 8 1:1.8.0.432.b06-2.el8
  • java-1.8.0-openjdk-demo AlmaLinux 9 1:1.8.0.432.b06-2.el9
  • java-1.8.0-openjdk-javadoc AlmaLinux 8 1:1.8.0.432.b06-2.el8
  • java-1.8.0-openjdk-javadoc AlmaLinux 9 1:1.8.0.432.b06-2.el9

almalinux advisories ALSA-2024:8117ALSA-2024:8121ALSA-2024:8124ALSA-2024:8127

  • java-1.8.0-openjdk Rocky Linux 8 1:1.8.0.432.b06-2.el8
  • java-1.8.0-openjdk Rocky Linux 9 1:1.8.0.432.b06-2.el9
  • java-11-openjdk Rocky Linux 9 1:11.0.25.0.9-2.el9
  • java-11-openjdk Rocky Linux 8 1:11.0.25.0.9-2.el8
  • java-17-openjdk Rocky Linux 8 1:17.0.13.0.11-3.el8
  • java-17-openjdk Rocky Linux 9 1:17.0.13.0.11-3.el9
  • java-21-openjdk Rocky Linux 8 1:21.0.5.0.10-3.el8
  • java-21-openjdk Rocky Linux 9 1:21.0.5.0.10-3.el9

rocky linux advisories RLSA-2024:8117RLSA-2024:8121RLSA-2024:8124RLSA-2024:8127

  • giflib Alpine 3.24, Alpine 3.23, Alpine 3.22 +5 more 5.2.2-r0

alpine advisories ALPINE-CVE-2023-48161

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • giflib CBL-Mariner 2.0, Azure Linux 3.0 5.2.1-7

azure linux advisories AZL-32035AZL-34729

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-48161 updated cvss 7.1

giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function

  • Red Hat build of OpenJDK 1.8 java-11-openjdk-portable java-11-openjdk-portable, java-17-openjdk-portable java-17-openjdk-portable, java-1.8.0-openjdk-portable java-1.8.0-openjdk-portable
    affected: workaround, no fix planned “Will not fix”
  • Red Hat build of OpenJDK 11 java-11-openjdk-portable java-11-openjdk-portable, java-17-openjdk-portable java-17-openjdk-portable, java-1.8.0-openjdk-portable java-1.8.0-openjdk-portable
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat build of OpenJDK 17 java-11-openjdk-portable java-11-openjdk-portable, java-1.8.0-openjdk-portable java-1.8.0-openjdk-portable
    affected: workaround, no fix available
  • Red Hat Enterprise Linux 6 giflib, giflib-utils Red Hat Enterprise Linux 7 giflib, giflib-utils
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 8 giflib Red Hat Enterprise Linux 9 giflib, java-11-openjdk, java-11-openjdk-src, java-11-openjdk-demo, java-11-openjdk-jmods, java-11-openjdk-javadoc, +17 more
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Build of OpenJDK 8u432
    fixed: vendor fix RHSA-2024:8118
  • Red Hat Build of OpenJDK 11.0.25
    fixed: vendor fix RHSA-2024:8122
  • Red Hat Build of OpenJDK 17.0.13
    fixed: vendor fix RHSA-2024:8125
show 5 more
  • Red Hat Build of OpenJDK 21.0.4
    fixed: vendor fix RHSA-2024:8129
  • Red Hat Build of OpenJDK 21.0.5
    fixed: vendor fix RHSA-2024:8128
  • Red Hat CodeReady Linux Builder EUS (v.8.8) java-11-openjdk-fastdebug 11.0.25.0.9-2.el8, java-11-openjdk-slowdebug 11.0.25.0.9-2.el8, java-17-openjdk-fastdebug 17.0.13.0.11-3.el8, java-17-openjdk-slowdebug 17.0.13.0.11-3.el8, java-11-openjdk-src-fastdebug 11.0.25.0.9-2.el8, java-11-openjdk-src-slowdebug 11.0.25.0.9-2.el8, +34 more Red Hat CodeReady Linux Builder EUS (v.9.2) java-11-openjdk-fastdebug 11.0.25.0.9-2.el9, java-11-openjdk-slowdebug 11.0.25.0.9-2.el9, java-17-openjdk-fastdebug 17.0.13.0.11-3.el9, java-17-openjdk-slowdebug 17.0.13.0.11-3.el9, java-11-openjdk-src-fastdebug 11.0.25.0.9-2.el9, java-11-openjdk-src-slowdebug 11.0.25.0.9-2.el9, +32 more Red Hat Enterprise Linux AppStream (v. 8) java-11-openjdk 11.0.25.0.9-2.el8, java-21-openjdk 21.0.5.0.10-3.el8, java-17-openjdk 17.0.13.0.11-3.el8, java-11-openjdk-src 11.0.25.0.9-2.el8, java-21-openjdk-src 21.0.5.0.10-3.el8, java-1.8.0-openjdk 1.8.0.432.b06-2.el8, +25 more Red Hat Enterprise Linux AppStream (v. 9) java-11-openjdk 11.0.25.0.9-2.el9, java-21-openjdk 21.0.5.0.10-3.el9, java-17-openjdk 17.0.13.0.11-3.el9, java-11-openjdk-src 11.0.25.0.9-2.el9, java-21-openjdk-src 21.0.5.0.10-3.el9, java-1.8.0-openjdk 1.8.0.432.b06-2.el9, +24 more Red Hat Enterprise Linux AppStream AUS (v. 8.2) java-11-openjdk 11.0.25.0.9-1.el8_2, java-11-openjdk-src 11.0.25.0.9-1.el8_2, java-1.8.0-openjdk 1.8.0.432.b06-1.el8_2, java-11-openjdk-demo 11.0.25.0.9-1.el8_2, java-11-openjdk-jmods 11.0.25.0.9-1.el8_2, java-11-openjdk-javadoc 11.0.25.0.9-1.el8_2, +9 more Red Hat Enterprise Linux AppStream AUS (v.8.4) java-11-openjdk 11.0.25.0.9-1.el8_4, java-17-openjdk 17.0.13.0.11-1.el8_4, java-11-openjdk-src 11.0.25.0.9-1.el8_4, java-1.8.0-openjdk 1.8.0.432.b06-1.el8_4, java-11-openjdk-demo 11.0.25.0.9-1.el8_4, java-17-openjdk-src 17.0.13.0.11-1.el8_4, +17 more
    +10 more products
    Red Hat Enterprise Linux AppStream AUS (v.8.6) java-11-openjdk 11.0.25.0.9-1.el8_6, java-17-openjdk 17.0.13.0.11-1.el8_6, java-11-openjdk-src 11.0.25.0.9-1.el8_6, java-1.8.0-openjdk 1.8.0.432.b06-1.el8_6, java-11-openjdk-demo 11.0.25.0.9-1.el8_6, java-17-openjdk-src 17.0.13.0.11-1.el8_6, +17 more Red Hat Enterprise Linux AppStream E4S (v.8.4) java-11-openjdk 11.0.25.0.9-1.el8_4, java-17-openjdk 17.0.13.0.11-1.el8_4, java-11-openjdk-src 11.0.25.0.9-1.el8_4, java-1.8.0-openjdk 1.8.0.432.b06-1.el8_4, java-11-openjdk-demo 11.0.25.0.9-1.el8_4, java-17-openjdk-src 17.0.13.0.11-1.el8_4, +17 more Red Hat Enterprise Linux AppStream E4S (v.8.6) java-11-openjdk 11.0.25.0.9-1.el8_6, java-17-openjdk 17.0.13.0.11-1.el8_6, java-11-openjdk-src 11.0.25.0.9-1.el8_6, java-1.8.0-openjdk 1.8.0.432.b06-1.el8_6, java-11-openjdk-demo 11.0.25.0.9-1.el8_6, java-17-openjdk-src 17.0.13.0.11-1.el8_6, +17 more Red Hat Enterprise Linux AppStream E4S (v.9.0) java-11-openjdk 11.0.25.0.9-1.el9_0, java-17-openjdk 17.0.13.0.11-1.el9_0, java-11-openjdk-src 11.0.25.0.9-1.el9_0, java-1.8.0-openjdk 1.8.0.432.b06-1.el9_0, java-11-openjdk-demo 11.0.25.0.9-1.el9_0, java-17-openjdk-src 17.0.13.0.11-1.el9_0, +16 more Red Hat Enterprise Linux AppStream EUS (v.8.8) java-11-openjdk 11.0.25.0.9-2.el8, java-17-openjdk 17.0.13.0.11-3.el8, java-11-openjdk-src 11.0.25.0.9-2.el8, java-1.8.0-openjdk 1.8.0.432.b06-2.el8, java-11-openjdk-demo 11.0.25.0.9-2.el8, java-17-openjdk-src 17.0.13.0.11-3.el8, +17 more Red Hat Enterprise Linux AppStream EUS (v.9.2) java-11-openjdk 11.0.25.0.9-2.el9, java-17-openjdk 17.0.13.0.11-3.el9, java-11-openjdk-src 11.0.25.0.9-2.el9, java-1.8.0-openjdk 1.8.0.432.b06-2.el9, java-11-openjdk-demo 11.0.25.0.9-2.el9, java-17-openjdk-src 17.0.13.0.11-3.el9, +16 more Red Hat Enterprise Linux AppStream TUS (v.8.4) java-11-openjdk 11.0.25.0.9-1.el8_4, java-17-openjdk 17.0.13.0.11-1.el8_4, java-11-openjdk-src 11.0.25.0.9-1.el8_4, java-1.8.0-openjdk 1.8.0.432.b06-1.el8_4, java-11-openjdk-demo 11.0.25.0.9-1.el8_4, java-17-openjdk-src 17.0.13.0.11-1.el8_4, +17 more Red Hat Enterprise Linux AppStream TUS (v.8.6) java-11-openjdk 11.0.25.0.9-1.el8_6, java-17-openjdk 17.0.13.0.11-1.el8_6, java-11-openjdk-src 11.0.25.0.9-1.el8_6, java-1.8.0-openjdk 1.8.0.432.b06-1.el8_6, java-11-openjdk-demo 11.0.25.0.9-1.el8_6, java-17-openjdk-src 17.0.13.0.11-1.el8_6, +17 more Red Hat Enterprise Linux CRB (v. 8) java-11-openjdk-fastdebug 11.0.25.0.9-2.el8, java-11-openjdk-slowdebug 11.0.25.0.9-2.el8, java-21-openjdk-fastdebug 21.0.5.0.10-3.el8, java-21-openjdk-slowdebug 21.0.5.0.10-3.el8, java-17-openjdk-fastdebug 17.0.13.0.11-3.el8, java-17-openjdk-slowdebug 17.0.13.0.11-3.el8, +48 more Red Hat Enterprise Linux CRB (v. 9) java-11-openjdk-fastdebug 11.0.25.0.9-2.el9, java-11-openjdk-slowdebug 11.0.25.0.9-2.el9, java-21-openjdk-fastdebug 21.0.5.0.10-3.el9, java-21-openjdk-slowdebug 21.0.5.0.10-3.el9, java-17-openjdk-fastdebug 17.0.13.0.11-3.el9, java-17-openjdk-slowdebug 17.0.13.0.11-3.el9, +46 more
    fixed: vendor fix RHSA-2024:8117
  • Red Hat Enterprise Linux Server (v. 7 ELS) java-11-openjdk 11.0.25.0.9-1.el7_9, java-1.8.0-openjdk 1.8.0.432.b06-1.el7_9, java-11-openjdk-headless 11.0.25.0.9-1.el7_9, java-1.8.0-openjdk-headless 1.8.0.432.b06-1.el7_9 Red Hat Enterprise Linux Server Optional (v. 7 ELS) java-11-openjdk-src 11.0.25.0.9-1.el7_9, java-11-openjdk-demo 11.0.25.0.9-1.el7_9, java-11-openjdk-jmods 11.0.25.0.9-1.el7_9, java-11-openjdk-javadoc 11.0.25.0.9-1.el7_9, java-1.8.0-openjdk-src 1.8.0.432.b06-1.el7_9, java-1.8.0-openjdk-demo 1.8.0.432.b06-1.el7_9, +5 more
    fixed: vendor fix RHSA-2024:8116
  • Red Hat build of OpenJDK 17 java-17-openjdk-portable java-17-openjdk-portable
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
31 d ago

Exploit prediction

0.43% chance of exploitation in the next 30 days, higher than 37% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • sourceforge.net https://sourceforge.net/p/giflib/bugs/167/ referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/tacetool/TACE#cve-2023-48161 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 3.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
OSV 3.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected packages

ecosystem package affected fixed in
julia Giflib_jll
>=5.2.1+0, <5.2.2+0
5.2.2+0

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.