CVE-2026-4985 is an integer overflow vulnerability in the cgif_addframe function of dloebl CGIF up to version 0.5.2, affecting the GIF Image Handler component when processing width/height arguments. This medium-severity vulnerability (CVSS 4.3) can be exploited remotely with low attack complexity, requiring user interaction, and could lead to a partial denial of service. There is currently no evidence of active exploitation, public exploit code, or significant media coverage, though it has received minimal community discussion. A patch (b0ba830093f4317a5d1f345715d2fa3cd2dab474) is available and recommended to address this issue.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Dloebl | CGIF | 0.5.0, 0.5.1, 0.5.2CNA affected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.