CVEs affecting projects tracked on Release Alert, from NVD & OSV.
There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.