A buffer overflow vulnerability (CVE-2026-26740, CVSS 8.2 High) in the giflib library's EGifGCBToExtension function can be exploited to cause a Denial of Service. According to the authoritative NVD data, the vulnerability affects giflib version 5.2.2. The Red Hat article provides patched packages for RHEL 8 but does not specify the upstream fixed version number for giflib itself.
Red Hat Product Errata RHSA-2026:33503 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33503 - Security Advisory Overview Updated Packages Synopsis Important: giflib security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for giflib is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description giflib is a library for reading and writing gif images. Security Fix(es): giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2448747 - CVE-2026-26740 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVEs CVE-2026-26740 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM giflib-5.1.4-5.el8_10.src.rpm SHA-256: b50ae607bfeb6be66ba7ccc6e07e3b4e89488822edb9abe9fe2834b2c6d156f1 x86_64 giflib-5.1.4-5.el8_10.i686.rpm SHA-256: f107bf6c4a57f519d690251a70ef1f4ad36c5b9e37a68076d202c350771aa6e7 giflib-5.1.4-5.el8_10.x86_64.rpm SHA-256: 3752775087e0ffac89412f073786fe29b3a8a3b1e60ff2e4d6ef3cdd6241bc76 giflib-debuginfo-5.1.4-5.el8_10.i686.rpm SHA-256: e0919f27f2920c101ce323ae619d6e543a82641cfe8e24f36675781462a9814e giflib-debuginfo-5.1.4-5.el8_10.x86_64.rpm SHA-256: 2f687b52da44dbdb11f00c58a384a40c210ae76d9d43c382d857c39116110a24 giflib-debugsource-5.1.4-5.el8_10.i686.rpm SHA-256: 427db59d92a17a1b3f2817bb3713617e08a08b1ca5781f8928b869de93b23d26 giflib-debugsource-5.1.4-5.el8_10.x86_64.rpm SHA-256: 634bd17fd88411ffad288563bb576ba96b2146f9853e0312e5b5a95d54db4659 giflib-utils-debuginfo-5.1.4-5.el8_10.i686.rpm SHA-256: 6c8394808574475a74f50a11e378760b86d4e32320db326a2af7065c181eb6e6 giflib-utils-debuginfo-5.1.4-5.el8_10.x86_64.rpm SHA-256: 53f9ed4b511227f270575fa738cf8a9afec653ce339515ada1e026e3b99af684 Red Hat Enterprise Linux for IBM z Systems 8 SRPM giflib-5.1.4-5.el8_10.src.rpm SHA-256: b50ae607bfeb6be66ba7ccc6e07e3b4e89488822edb9abe9fe2834b2c6d156f1 s390x giflib-5.1.4-5.el8_10.s390x.rpm SHA-256: 66fb68cb2e7afde8c608ccaf0234feb8d420a58bf1065da7d6275e7861263a03 giflib-debuginfo-5.1.4-5.el8_10.s390x.rpm SHA-256: 02baa26fb207b6dcf037519e0631d08909c797d6bc5f8236cee314efcd6b9f94 giflib-debugsource-5.1.4-5.el8_10.s390x.rpm SHA-256: ed763a56e14882543b102e46fa2b056e2ad544887d79117cc802d2c86737eaca giflib-utils-debuginfo-5.1.4-5.el8_10.s390x.rpm SHA-256: a0c5832f7ca2d8a39ebf05cb5f76938966a0fe8adb4ee6971cff40aa4fe0f2d8 Red Hat Enterprise Linux for Power, little endian 8 SRPM giflib-5.1.4-5.el8_10.src.rpm SHA-256: b50ae607bfeb6be66ba7ccc6e07e3b4e89488822edb9abe9fe2834b2c6d156f1 ppc64le giflib-5.1.4-5.el8_10.ppc64le.rpm SHA-256: d80ba85d8ca39e1c39516656964c349ea1a6e21eb2d1f735151b0ffc9acd5a3b giflib-debuginfo-5.1.4-5.el8_10.ppc64le.rpm SHA-256: c3015660566152d5c3ca49947e647d80868193ff1f04e942eea175c82b3f395f giflib-debugsource-5.1.4-5.el8_10.ppc64le.rpm SHA-256: ea897a9dc79be5eb1430e92e30a62c332f5806524e1976230a9a54d63b2892dc giflib-utils-debuginfo-5.1.4-5.el8_10.ppc64le.rpm SHA-256: 1ed872d5156c3fed54e7bf118122c45555e4f446a817d3a111c82ed67eaec710 Red Hat Enterprise Linux for ARM 64 8 SRPM giflib-5.1.4-5.el8_10.src.rpm SHA-256: b50ae607bfeb6be66ba7ccc6e07e3b4e89488822edb9abe9fe2834b2c6d156f1 aarch64 giflib-5.1.4-5.el8_10.aarch64.rpm SHA-256: 6b18fca7eb4aa2ae54a04e6735c4dce4f7145f61c68138fb360959d62b155d17 giflib-debuginfo-5.1.4-5.el8_10.aarch64.rpm SHA-256: dd911c59578fdbde7108f3ba161756ab516b0624b86c9da1352d5df852cb5ad4 giflib-debugsource-5.1.4-5.el8_10.aarch64.rpm SHA-256: 62e8e9fb36bd6ca7a6413e84e3c44ead9a18546b3eb2fab2b985ec0ed7daccba giflib-utils-debuginfo-5.1.4-5.el8_10.aarch64.rpm SHA-256: 03801a5003b9f88c7a3e0936964880316af864d623a9f84f96bbd39a53619f1f Red Hat CodeReady Linux Builder for x86_64 8 SRPM x86_64 giflib-debuginfo-5.1.4-5.el8_10.i686.rpm SHA-256: e0919f27f2920c101ce323ae619d6e543a82641cfe8e24f36675781462a9814e giflib-debuginfo-5.1.4-5.el8_10.x86_64.rpm SHA-256: 2f687b52da44dbdb11f00c58a384a40c210ae76d9d43c382d857c39116110a24 giflib-debugsource-5.1.4-5.el8_10.i686.rpm SHA-256: 427db59d92a17a1b3f2817bb3713617e08a08b1ca5781f8928b869de93b23d26 giflib-debugsource-5.1.4-5.el8_10.x86_64.rpm SHA-256: 634bd17fd88411ffad288563bb576ba96b2146f9853e0312e5b5a95d54db4659 giflib-devel-5.1.4-5.el8_10.i686.rpm SHA-256: eca1f1d9f8deb8870d173e5e0b2b3462d4b02574a28e81a6d0725651563d1139 giflib-devel-5.1.4-5.el8_10.x86_64.rpm SHA-256: 0eb1b162998eef0e4a7ede9d1e3664eb79c50e17e1b4b246352b29f4f4d7c5e6 giflib-utils-debuginfo-5.1.4-5.el8_10.i686.rpm SHA-256: 6c8394808574475a74f50a11e378760b86d4e32320db326a2af7065c181eb6e6 giflib-utils-debuginfo-5.1.4-5.el8_10.x86_64.rpm SHA-256: 53f9ed4b511227f270575fa738cf8a9afec653ce339515ada1e026e3b99af684 Red Hat CodeReady Linux Builder for Power, little endian 8 SRPM ppc64le giflib-debuginfo-5.1.4-5.el8_10.ppc64le.rpm SHA-256: c3015660566152d5c3ca49947e647d80868193ff1f04e942eea175c82b3f395f giflib-debugsource-5.1.4-5.el8_10.ppc64le.rpm SHA-256: ea897a9dc79be5eb1430e92e30a62c332f5806524e1976230a9a54d63b2892dc giflib-devel-5.1.4-5.el8_10.ppc64le.rpm SHA-256: 1dff9e2d776a41720695b82936f65c70467ceabe2c3a403807eab296d78ac6d9 giflib-utils-debuginfo-5.1.4-5.el8_10.ppc64le.rpm SHA-256: 1ed872d5156c3fed54e7bf118122c45555e4f446a817d3a111c82ed67eaec710 Red Hat CodeReady Linux Builder for ARM 64 8 SRPM aarch64 giflib-debuginfo-5.1.4-5.el8_10.aarch64.rpm SHA-256: dd911c59578fdbde7108f3ba161756ab516b0624b86c9da1352d5df852cb5ad4 giflib-debugsource-5.1.4-5.el8_10.aarch64.rpm SHA-256: 62e8e9fb36bd6ca7a6413e84e3c44ead9a18546b3eb2fab2b985ec0ed7daccba giflib-devel-5.1.4-5.el8_10.aarch64.rpm SHA-256: 3f7e44ebd5159828a2a0d0678ba4e8430443f06efca6fdd0106fd1cd2392465e giflib-utils-debuginfo-5.1.4-5.el8_10.aarch64.rpm SHA-256: 03801a5003b9f88c7a3e0936964880316af864d623a9f84f96bbd39a53619f1f Red Hat CodeReady Linux Builder for IBM z Systems 8 SRPM s390x giflib-debuginfo-5.1.4-5.el8_10.s390x.rpm SHA-256: 02baa26fb207b6dcf037519e0631d08909c797d6bc5f8236cee314efcd6b9f94 giflib-debugsource-5.1.4-5.el8_10.s390x.rpm SHA-256: ed763a56e14882543b102e46fa2b056e2ad544887d79117cc802d2c86737eaca giflib-devel-5.1.4-5.el8_10.s390x.rpm SHA-256: b8e2a492bc91311ec8d1a5d9ec304ab93e1265c531ec519b64aa5cb90fec0931 giflib-utils-debuginfo-5.1.4-5.el8_10.s390x.rpm SHA-256: a0c5832f7ca2d8a39ebf05cb5f76938966a0fe8adb4ee6971cff40aa4fe0f2d8 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM giflib-5.1.4-5.el8_10.src.rpm SHA-256: b50ae607bfeb6be66ba7ccc6e07e3b4e89488822edb9abe9fe2834b2c6d156f1 x86_64 giflib-5.1.4-5.el8_10.i686.rpm SHA-256: f107bf6c4a57f519d690251a70ef1f4ad36c5b9e37a68076d202c350771aa6e7 giflib-5.1.4-5.el8_10.x86_64.rpm SHA-256: 3752775087e0ffac89412f073786fe29b3a8a3b1e60ff2e4d6ef3cdd6241bc76 giflib-debuginfo-5.1.4-5.el8_10.i686.rpm SHA-256: e0919f27f2920c101ce323ae619d6e543a82641cfe8e24f36675781462a9814e giflib-debuginfo-5.1.4-5.el8_10.x86_64.rpm SHA-256: 2f687b52da44dbdb11f00c58a384a40c210ae76d9d43c382d857c39116110a24 giflib-debugsource-5.1.4-5.el8_10.i686.rpm SHA-256: 427db59d92a17a1b3f2817bb3713617e08a08b1ca5781f8928b869de93b23d26 giflib-debugsource-5.1.4-5.el8_10.x86_64.rpm SHA-256: 634bd17fd88411ffad288563bb576ba96b2146f9853e0312e5b5a95d54db4659 giflib-utils-debuginfo-5.1.4-5.el8_10.i686.rpm SHA-256: 6c8394808574475a74f50a11e378760b86d4e32320db326a2af7065c181eb6e6 giflib-utils-debuginfo-5.1.4-5.el8_10.x86_64.rpm SHA-256: 53f9ed4b511227f270575fa738cf8a9afec653ce339515ada1e026e3b99af684 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM giflib-5.1.4-5.el8_10.src.rpm SHA-256: b50ae607bfeb6be66ba7ccc6e07e3b4e89488822edb9abe9fe2834b2c6d156f1 aarch64 giflib-5.1.4-5.el8_10.aarch64.rpm SHA-256: 6b18fca7eb4aa2ae54a04e6735c4dce4f7145f61c68138fb360959d62b155d17 giflib-debuginfo-5.1.4-5.el8_10.aarch64.rpm SHA-256: dd911c59578fdbde7108f3ba161756ab516b0624b86c9da1352d5df852cb5ad4 giflib-debugsource-5.1.4-5.el8_10.aarch64.rpm SHA-256: 62e8e9fb36bd6ca7a6413e84e3c44ead9a18546b3eb2fab2b985ec0ed7daccba giflib-utils-debuginfo-5.1.4-5.el8_10.aarch64.rpm SHA-256: 03801a5003b9f88c7a3e0936964880316af864d623a9f84f96bbd39a53619f1f Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM giflib-5.1.4-5.el8_10.src.rpm SHA-256: b50ae607bfeb6be66ba7ccc6e07e3b4e89488822edb9abe9fe2834b2c6d156f1 ppc64le giflib-5.1.4-5.el8_10.ppc64le.rpm SHA-256: d80ba85d8ca39e1c39516656964c349ea1a6e21eb2d1f735151b0ffc9acd5a3b giflib-debuginfo-5.1.4-5.el8_10.ppc64le.rpm SHA-256: c3015660566152d5c3ca49947e