ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c.
miniupnp project ngiflib 0.4