{"action":"Upgrade gifsicle to 1.91-1 or later.","affected":[{"fixed":"1.91-1","introduced":"0"}],"component":"gifsicle","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.91-1"],"id":"tcs_01M5NCASN9850373A52S68TK6X","modified_at":"2026-09-01T20:03:46.986993202Z","published_at":"2018-02-02T09:29:00.227Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-18120","https://security-tracker.debian.org/tracker/CVE-2017-18120"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-18120","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-18120"}],"summary":"A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, becaus"}