Home / Vulnerability Intelligence / CVE-2026-26740

CVE-2026-26740 - Vulnerability Analysis

HighCVSS: 8.2

Last Updated: March 18, 2026

giflib - Buffer Overflow

Published: March 18, 2026Updated: March 18, 2026Remote Exploitable

Overview

giflib 5.2.2 contains a buffer overflow caused by EGifGCBToExtension overwriting an existing Graphic Control Extension block without size validation, letting remote attackers cause denial of service, exploit requires crafted GIF input.

Severity & Score

Severity: High

CVSS Score: 8.2

EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

Remote attackers can cause denial of service by triggering a buffer overflow.

Mitigation

Update to the latest version of giflib.

References

https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflib_giftool_gce_len_heap_oobwrite_disclosure.md

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 18, 2026

🟠 CVE-2026-26740 - High (8.2) Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-26740/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 18, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-26740
Severity: High
CVSS Score: 8.2
Type: buffer_overflow
Status: new
EPSS: 0.0%
Social Posts: 2

CWE

CWE-787

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

EPSS Score

0.0%Probability of exploitation in the next 30 days