598 matches found
CVE-2021-40812
The GD Graphics Library aka LibGD through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks...
CVE-2021-40812
The CVE-2021-40812 entry refers to the GD Graphics Library (libgd) up to version 2.3.2 having an out-of-bounds read caused by missing checks of gdGetBuf/gdPutBuf return values. Connected advisories confirm affected packages and provide fixes: Debian LTS updates for libgd2 (e.g., 2.3.0-2+deb11u1 i...
CVE-2021-40812
The GD Graphics Library aka LibGD through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks...
PT-2021-8088
Name of the Vulnerable Software and Affected Versions The GD Graphics Library aka LibGD versions 2.3.2 and earlier Description The issue is related to an out-of-bounds read in the GD Graphics Library due to the lack of certain return value checks for gdGetBuf and gdPutBuf. This can potentially...
CVE-2021-40145
gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...
CVE-2021-40145
gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...
UBUNTU-CVE-2021-40145
gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...
CVE-2021-40145
gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...
CVE-2021-40145
gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...
CVE-2021-40145
gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...
CVE-2021-40145
CVE-2021-40145 is a double-free vulnerability in libgd2 (gdImageGd2Ptr in gd_gd2.c) affecting libgd2 up to and including 2.3.2. Connected advisories confirm patches/upgrades exist (e.g., Debian DLA-4411-1 fixing libgd2 in 2.3.0-2+deb11u1; Mariner and ALAS advisories indicate required upgrades to ...
CVE-2021-40145
gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...
GD Graphics Library资源管理错误漏洞
GD Graphics Library is an open source library for programmers to dynamically create images. A resource management error vulnerability exists in the GD Graphics Library, which stems from a double release of gdImageGd2Ptr in gdgd2.c in GD Graphics Library aka LibGD through 2.3.2...
Php-Jpeg-Injector - Injects Php Payloads Into Jpeg Images
Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it interprets the image...
CVE-2021-38115
readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...
AZL-6431 CVE-2021-38115 affecting package gd for versions less than 2.3.3-1
readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...
CVE-2021-38115
readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...
ALPINE-CVE-2021-38115
readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...