CVE-2018-11576

ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor.

• CWE-125

• https://github.com/Edward-L/fuzzing-pocs/tree/master/ngiflibThird Party Advisory
• https://github.com/miniupnp/ngiflib/issues/6Third Party Advisory
• https://github.com/Edward-L/fuzzing-pocs/tree/master/ngiflibThird Party Advisory
• https://github.com/miniupnp/ngiflib/issues/6Third Party Advisory

Published

May 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11569Controller/ListController.php in Eventum 3.5.0 is vulnerable…
• CVE-2018-1157Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to …
• CVE-2018-11571ClipperCMS 1.3.3 allows Session Fixation.
• CVE-2018-11572ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Mo…
• CVE-2018-11574Improper input validation together with an integer overflow …9.8
• CVE-2018-11575ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer o…
• CVE-2018-11577Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in l…
• CVE-2018-11578GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has…
• CVE-2018-11579class-woo-banner-management.php in the MULTIDOTS WooCommerce…
• CVE-2018-1158Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to …
• CVE-2018-11580An issue was discovered in mass-pages-posts-creator.php in t…
• CVE-2018-11581Cross-site scripting (XSS) vulnerability on Brother HL serie…