[giflib-devel] CVE reported in giflib v5.2.1

Hi Team,


I am reaching out to you about the recent CVE<https://nvd.nist.gov/vuln/detail/CVE-2022-28506#vulnCurrentDescriptionTitle> reported in the latest version of the giflib library (5.2.1). The reported CVE is of high severity rated as 8.8 on NVD. The current status of CVE on the SourceForge website is still open: https://sourceforge.net/p/giflib/bugs/159/



This CVE is of high severity and will impact the availability, confidentiality, and integrity of the software involved. Therefore, I would really appreciate any information about the approximate timeline for fixing this vulnerability either through a patch or by the next official release.

Looking forward to your reply.



Thank you!

Rajat