CVE-2023-37748

Summary

CVE-2023-37748 is a newly disclosed vulnerability affecting the ngiflib library. The issue was identified in commit 5e7292 and stems from an infinite loop in the DecodeGifImg function at ngiflib.c. This flaw can result in excessive processing and potentially cause denial-of-service conditions when handling certain maliciously crafted GIF files. The vulnerability could be exploited by sending a specially crafted GIF file to the affected system, leading to potential performance degradation or crashes. It is recommended that users of the ngiflib library apply the latest patch as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.