A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function cgif_addframe of the file src/cgif.c of the component GIF Image Handler. The manipulation of the argument width/height leads to integer overflow. The attack may be initiated remotely. The identifier of the patch is b0ba830093f4317a5d1f345715d2fa3cd2dab474. It is suggested to install a patch to address this issue.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7716e480cb advisory.

    **Version 0.5.3**

    - Fix potential undefined behavior in `cgif_addframe` which could have led to an integer overflow
    **CVE-2026-4985**


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1a9f019f60 advisory.

    **Version 0.5.3**

    - Fix potential undefined behavior in `cgif_addframe` which could have led to an integer overflow
    **CVE-2026-4985**


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function     cgif_addframe of the file src/cgif.c of the component GIF Image Handler. The manipulation of the argument     width/height leads to integer overflow. The attack may be initiated remotely. The identifier of the patch     is b0ba830093f4317a5d1f345715d2fa3cd2dab474. It is suggested to install a patch to address this issue.
    (CVE-2026-4985)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
307055	Fedora 42 : libcgif (2026-7716e480cb)	Nessus	Fedora Local Security Checks	medium
307043	Fedora 43 : libcgif (2026-1a9f019f60)	Nessus	Fedora Local Security Checks	medium
304165	Linux Distros Unpatched Vulnerability : CVE-2026-4985	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-4985

medium

Tenable Plugins

medium

medium

medium