This vulnerability exists in the stbi__gif_load_next function of the stb_image library (up to version 2.30), specifically in the handling of multi-frame GIF files. A heap-based buffer overflow occurs due to improper memory handling during GIF frame loading. Exploitation requires local access and can lead to memory corruption. The vendor has not issued a fix or advisory, and public exploit code is available. The CVSS 4.8 score reflects a medium severity with local attack vector and low complexity.

Successful exploitation can cause heap-based buffer overflow leading to potential memory corruption. This may result in application crashes or undefined behavior. Since the attack requires local access, remote exploitation is not feasible based on current data. No evidence of widespread exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's channels for updates. Until a fix is released, avoid processing untrusted multi-frame GIF files locally with vulnerable versions of stb_image. Consider applying additional local security controls to limit access to vulnerable applications or libraries.