HIGH
DentonW
CVE published 2026-10-14
CVE-2017-20286
A heap-based buffer overflow vulnerability exists in DevIL through 1.8.0 in the iGetPalette() function in il_gif.cpp when loading GIF images. This allows attackers to write beyond a 768-byte palette buffer. The vulnerability can be exploited by supplying a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, potentially allowing execution of controlled bytes past the [truncated]