https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-19T03:57:28.752256+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2017-20286 fkie_cve-2017-20286 2026-10-19T03:57:28.755004+00:00

DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing up to 384 controlled bytes past the heap allocation and possibly executing code.

 https://vulnerability.circl.lu/vuln/ghsa-5rw7-933r-f38v GHSA-5rw7-933r-f38v 2026-10-19T03:57:28.755126+00:00

DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing up to 384 controlled bytes past the heap allocation and possibly executing code.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2017-20286 UBUNTU-CVE-2017-20286 2026-10-19T03:57:28.755151+00:00

Affected: Ubuntu:16.04:LTS: devil, Ubuntu:18.04:LTS: devil, Ubuntu:20.04:LTS: devil, Ubuntu:22.04:LTS: devil, Ubuntu:24.04:LTS: devil, Ubuntu:26.10: devil, Ubuntu:26.04:LTS: devil

DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing up to 384 controlled bytes past the heap allocation and possibly executing code.