Memory leak on gifsicle about gifsicle

[andreasstieger]

CVE-2023-44821 was assigned to this - a memory leak in a graphic cli tool found by a cybersecurity student from China. This should be challenged.

Buffer Overflow vulnerability

No, a memory leak.

allows a remote attacker

No, this is not network bound.

to cause a denial of service via the --crop parameter in the command line parameters.

Your scenario of multiple crop parameters is nonsensical. The are easier ways to do damage if parameter injection is assumed.

[Frank-Z7]

CVE-2023-44821 was assigned to this - a memory leak in a graphic cli tool found by a cybersecurity student from China. This should be challenged.

Buffer Overflow vulnerability

No, a memory leak.

allows a remote attacker

No, this is not network bound.

to cause a denial of service via the --crop parameter in the command line parameters.

Your scenario of multiple crop parameters is nonsensical. The are easier ways to do damage if parameter injection is assumed.

Thanks for your correction. The description of cve is indeed partly wrong. I have resubmitted the description at https://cveform.mitre.org/.