Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 39

Export CSV
CVE-2007-2756

gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.

CVSS 2.0 · 4.3 Medium EPSS 4.3% KEV · Not listed
Vendors
Libgd Redhat
Products
Libgd Enterprise Linux Rhel Application Stack
CVE-2009-3546

gd: insufficient input validation in _gdGetColors()

The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 9.3 Critical EPSS 10.2% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Gd Graphics Library Php Enterprise Linux
CVE-2007-3472

libgd Integer overflow in TrueColor code

Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.

CVSS 2.0 · 4.3 Medium EPSS 7.3% KEV · Not listed
Vendors
Libgd Redhat
Products
Gd Graphics Library Enterprise Linux
CVE-2007-3477

gd: arc drawing functions can consume large amount of CPU time

The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.

CVSS 2.0 · 5.0 Medium EPSS 4.9% KEV · Not listed
Vendors
Libgd
Products
Gd Graphics Library
CVE-2007-3473

libgd NULL pointer dereference when reading a corrupt X bitmap

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

CVSS 2.0 · 4.3 Medium EPSS 13.3% KEV · Not listed
Vendors
Libgd Redhat
Products
Gd Graphics Library Enterprise Linux
CVE-2007-3474

libgd Denial of service and reentrancy fixes in GIF code

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors.

CVSS 2.0 · 2.6 Low EPSS 2.5% KEV · Not listed
Vendors
Libgd
Products
Gd Graphics Library
CVE-2016-6912

php: Double free in gdImageWebpPtr()

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Libgd
Products
Libgd
CVE-2016-9317

gd: Missing check for oversized images in gdImageCreate()

The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.

CVSS 3.0 · 5.5 Medium EPSS 3.7% KEV · Not listed
Vendors
Libgd
Products
Libgd
CVE-2017-6362

gd: Double free in the gdImagePngPtr function

Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.

CVSS 3.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 1 more
Products
Ubuntu Linux Debian Linux Fedora and 1 more
CVE-2016-10166

gd: Unsigned integer underflow _gdContributionsAlloc()

Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.

CVSS 3.0 · 9.8 Critical EPSS 10.7% KEV · Not listed
Vendors
Libgd Redhat
Products
Libgd Rhel Software Collections
CVE-2016-10167

gd: DoS vulnerability in gdImageCreateFromGd2Ctx()

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.

CVSS 3.0 · 5.5 Medium EPSS 3.7% KEV · Not listed
Vendors
Libgd Redhat
Products
Libgd Enterprise Linux Rhel Software Collections
CVE-2016-10168

gd: Integer overflow in gd_io.c

Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.

CVSS 3.0 · 7.8 High EPSS 3.7% KEV · Not listed
Vendors
Libgd Redhat
Products
Libgd Enterprise Linux Rhel Software Collections
CVE-2016-6906

gd: Out-of-bounds read in read_image_tga function

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file, related to the decompression buffer.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Libgd
Products
Libgd
CVE-2016-6911

php: Missing check for OOB read in dynamicGetbuf()

The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Libgd
Products
Libgd
CVE-2016-8670

php: Stack based buffer overflow in dynamicGetbuf

Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call.

CVSS 3.0 · 9.8 Critical EPSS 4.7% KEV · Not listed
Vendors
Libgd Php
Products
Libgd Php
CVE-2016-9933

gd: Stack overflow in gdImageFillToBorder on truecolor images

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.

CVSS 3.0 · 7.5 High EPSS 6.9% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Libgd Php Rhel Software Collections
CVE-2016-6207

php,gd: Integer overflow error within _gdContributionsAlloc()

Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

CVSS 3.1 · 6.5 Medium EPSS 6.3% KEV · Not listed
Vendors
Debian Libgd Opensuse and 2 more
Products
Debian Linux Libgd Leap and 2 more
CVE-2013-7456

gd: incorrect boundary adjustment in _gdContributionsCalc

gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function.

CVSS 3.0 · 7.6 High EPSS 3.8% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Libgd Php Rhel Software Collections
CVE-2014-9709

gd: buffer read overflow in gd_gif_in.c

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

CVSS 2.0 · 5.0 Medium EPSS 15.4% KEV · Not listed
Vendors
Canonical Debian Libgd and 3 more
Products
Ubuntu Linux Debian Linux Libgd and 4 more
CVE-2015-8877

gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches

The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.

CVSS 3.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Libgd Php Rhel Software Collections