commit 7bbe8ea1a595bb7509ffa0a86b076e9b720e85af Author: Eric S. Raymond Date: Wed Feb 18 18:06:50 2026 -0500 Resolve SourceForge bug #187: CVE-2025-31344 CVE: CVE-2025-31344 Upstream: https://sourceforge.net/p/giflib/code/ci/7bbe8ea1a595bb7509ffa0a86b076e9b720e85af Signed-off-by: Thomas Perale diff --git a/gif2rgb.c b/gif2rgb.c index b80ebcd..da4fa23 100644 --- a/gif2rgb.c +++ b/gif2rgb.c @@ -327,6 +327,11 @@ static void DumpScreen2RGB(char *FileName, int OneFileFlag, GifRow = ScreenBuffer[i]; GifQprintf("\b\b\b\b%-4d", ScreenHeight - i); for (j = 0; j < ScreenWidth; j++) { + /* Check if color is within color palete */ + if (GifRow[j] >= ColorMap->ColorCount) { + GIF_EXIT(GifErrorString( + D_GIF_ERR_IMAGE_DEFECT)); + } ColorMapEntry = &ColorMap->Colors[GifRow[j]]; Buffers[0][j] = ColorMapEntry->Red; Buffers[1][j] = ColorMapEntry->Green;