Export limit exceeded: 17080 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2007-3472

libgd Integer overflow in TrueColor code

Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.

CVSS 2.0 · 4.3 Medium EPSS 7.3% KEV · Not listed
Vendors
Libgd Redhat
Products
Gd Graphics Library Enterprise Linux
CVE-2007-3473

libgd NULL pointer dereference when reading a corrupt X bitmap

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

CVSS 2.0 · 4.3 Medium EPSS 13.3% KEV · Not listed
Vendors
Libgd Redhat
Products
Gd Graphics Library Enterprise Linux
CVE-2007-3474

libgd Denial of service and reentrancy fixes in GIF code

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors.

CVSS 2.0 · 2.6 Low EPSS 2.5% KEV · Not listed
Vendors
Libgd
Products
Gd Graphics Library
CVE-2007-3477

gd: arc drawing functions can consume large amount of CPU time

The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.

CVSS 2.0 · 5.0 Medium EPSS 4.9% KEV · Not listed
Vendors
Libgd
Products
Gd Graphics Library
CVE-2009-3546

gd: insufficient input validation in _gdGetColors()

The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 9.3 Critical EPSS 10.2% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Gd Graphics Library Php Enterprise Linux