libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.