Threat database

A floating point exception (FPE) vulnerability exists in gifsicle version 1.94 in the resize_stream function located in src/xform.c. This vulnerability could cause the program to crash or behave unexpectedly when processing certain inputs.

CVE-2023-44821 is a denial of service vulnerability in gifsicle versions up to 1.94. It arises if untrusted input can influence Gif_Realloc calls, potentially causing excessive memory consumption. However, this issue is disputed because gifsicle is not typically used as a long-running service processing untrusted input continuously, nor is it commonly embedded as a library. Therefore, realistic exploitation scenarios are limited.