CVE-2019-6977

🗓️ 27 Jan 2019 02:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 1064 Views🌐 WEB

GD Graphics Library heap-based buffer overflo

Reporter	Title	Published	Views	Family All 152
zdt	PHP 7.2 - imagecolormatch() Out of Band Heap Write Exploit	9 Apr 201900:00	–	zdt
GithubExploit	Exploit for Out-of-bounds Write in Libgd	5 Mar 201910:25	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Libgd	6 Aug 202606:39	–	githubexploit
GithubExploit	Exploit for Use After Free in Apache Http_Server	12 May 201910:08	–	githubexploit
IBM Security Bulletins	Security Bulletin: API Connect's Developer Portal is impacted by vulnerabilities in PHP	3 Mar 202002:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in PHP (CVE-2019-6978, CVE-2019-6977)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in PHP (CVE-2019-6977) (CVE-2019-6978)	9 Jan 202018:44	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0054: gd (ALINUX3-SA-2022:0054)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : gd (ALSA-2020:4659)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : gd (CESA-2020:4659)	1 Feb 202100:00	–	nessus

NVD

Node

libgd libgdMatch2.2.5

Node

OR

php phpRange<5.6.40

php phpRange7.0.0–7.1.26

php phpRange7.2.0–7.2.14

php phpMatch7.3.0

Node

OR

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

OR

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch18.10

Node

netapp storage_automation_store

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2019-04/msg00025.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTXSLRZI5BCQT3H5KALG3DHUWUMNPDX2/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/
securityfocus	www.securityfocus.com/bid/106731
exploit-db	www.exploit-db.com/exploits/46677/
php	www.php.net/ChangeLog-5.php
bugs	www.bugs.php.net/bug.php
access	www.access.redhat.com/errata/RHSA-2019:2519
php	www.php.net/ChangeLog-7.php
packetstormsecurity	www.packetstormsecurity.com/files/152459/PHP-7.2-imagecolormatch-Out-Of-Band-Heap-Write.html

Parameter	Position	Path	Description	CWE
f	query param	/exploit.php	PHP imagecolormatch OOB heap write vulnerability exploitable via crafted image data leading to code execution	CWE-787
c	query param	/exploit.php	PHP imagecolormatch OOB heap write vulnerability exploitable via crafted image data leading to code execution	CWE-787

17 Jun 2026 02:39Current

8.6High risk

Vulners AI Score8.6

CVSS 26.8

CVSS 38.8

EPSS0.64265

cve-2019-6977 libgd php imagecolormatch function buffer overflow security vulnerability nvd