A buffer overflow in the DecodeLZW function of bitbank2 AnimatedGIF allows a malicious GIF file to corrupt memory, enabling a crash or, if the overflow is properly leveraged, arbitrary code execution on the host system. This memory‑corruption weakness threatens the integrity of the application and, if exploited, could compromise confidentiality and availability of the affected system. Based on the description, it is inferred that the attacker can trigger this vulnerability by supplying a malicious GIF file to an environment that loads or processes GIF images through the vulnerable library.

bitbank2 AnimatedGIF version 2.2.0 is affected. No other versions or vendors are listed in the advisory.

The CVSS score of 9.8 indicates a high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Although exploitation data is absent, the potential impact remains significant: an attacker must deliver or cause the processing of a crafted GIF file by the vulnerable library. This can be achieved remotely by supplying the file to any exposed service that parses GIFs or locally by running the application with the malicious file. Once triggered, the buffer overflow could lead to arbitrary code execution or a denial of service.