CVE-2022-28506

Risk Scores

Affected Products

Exploit Intelligence

• CIRCL seen: CVE-2022-28506 (circl-sighting)
• https://github.com/verf1sh/Poc/blob/master/giflib_poc (circl)
• https://github.com/verf1sh/Poc/blob/master/asan_report_giflib.png (circl)
• https://sourceforge.net/p/giflib/bugs/159/ (circl)
• FEDORA-2022-964883b2a5 (circl)
• FEDORA-2022-91f353b8be (circl)

Timeline

• Apr 25, 2022 CVE Published
• Apr 25, 2022 PoC Published
• Apr 26, 2022 EPSS Score
• Jun 15, 2022 EPSS Score
• Aug 5, 2022 EPSS Score
• Sep 23, 2022 EPSS Score
• Nov 12, 2022 EPSS Score
• Jan 1, 2023 EPSS Score
• Feb 20, 2023 EPSS Score
• Mar 7, 2023 EPSS Score
• Apr 11, 2023 EPSS Score
• May 30, 2023 EPSS Score

References

• ALAS2023-2023-075: giflib (medium) advisory