CVE-2026-30141
A critical buffer overflow vulnerability exists in the DecodeLZW function of bitbank2 AnimatedGIF version 2.2.0. Attackers can send a specially crafted GIF file to trigger the overflow, potentially leading to arbitrary code execution or a denial‑of‑service crash. The vulnerability has a CVSS score of 9.8, but there are no known exploits in the wild and no official fix documented in the provided sources.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users of bitbank2 AnimatedGIF v2.2.0
Real-world impact
Remote code execution or denial of service via malicious GIF.
Why this severity
CVSS 9.8 (Critical) due to network‑adjacent attack vector, low complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- Jun 9, 2026 · Jun 9, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 23, 2026 · 12d agoAdvisory updatedThe NVD record was last revised.