libgd -- integer overflow which could lead to heap buffer overflow

LibGD reports: An integer overflow issue was found in function gdImageWebpCtx of file gdwebp.c which could lead to heap buffer overflow...

openSUSE Security Update : gd (openSUSE-2016-1003)

This update for gd fixes the following issues : - CVE-2016-6214: Buffer over-read issue when parsing crafted TGA file bsc991436 - CVE-2016-6132: read out-of-bands was found in the parsing of TGA files using libgd bsc987577 - CVE-2016-6128: Invalid color index not properly handled bsc991710 -...

Integer overflow

Integer overflow in the gdContributionsAlloc function in gdinterpolation.c in GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds memory write or memory consumption via unspecified vectors...

CVE-2016-6132

The gdImageCreateFromTgaCtx function in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

CVE-2016-6207

The CVE-2016-6207 issue affects the GD Graphics Library (libgd) up to version 2.2.3, due to an integer overflow in _gdContributionsAlloc within gd_interpolation.c. This allows remote attackers to trigger a denial of service via an out-of-bounds memory write or memory consumption. A patch/update t...

CVE-2016-6214

CVE-2016-6214 affects the GD Graphics Library (libgd) up to version 2.2.3, where gd_tga.c mishandles TGA input, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service. Root cause: improper boundary handling in TGA parsing. Affected versions: libgd ≤ 2.2.2 (befor...

CVE-2016-6132

CVE-2016-6132 affects the GD Graphics Library (libgd) . The vulnerability exists in the function gdImageCreateFromTgaCtx for libgd versions before 2.2.3 , where processing a crafted TGA file can lead to a remote denial of service via an out-of-bounds read . Impact is described as potentially trig...

CVE-2016-6161

CVE-2016-6161 affects the GD Graphics Library (libgd); specifically the output function in gd_gif_out.c can trigger an out-of-bounds read via a crafted GIF image, allowing a remote attacker to cause a denial of service. The connected documents consistently describe this issue as a remote vulnerab...

DEBIAN-CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-5116

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

DEBIAN-CVE-2016-5116

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

Stack overflow

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

CVE-2016-6128

CVE-2016-6128 affects the GD Graphics Library (libgd), specifically the gdImageCropThreshold function in gd_crop.c, with vulnerable pre-2.2.3 releases used by PHP prior to 7.0.9. Exploitation can cause an application crash (denial of service) via an invalid color index. Public advisories and vend...

CVE-2016-5766

CVE-2016-5766 affects the GD Graphics Library (libgd) via an integer overflow in _gd2GetHeader() in gd_gd2.c, before libgd 2.2.3. This can cause a heap-based overflow when processing crafted GD2 images, leading to a denial of service (and potentially other impact) on the host application using th...

CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-5116

The CVE applies to the GD Graphics Library (libgd) prior to version 2.2.0, used in certain PHP 5.5.x configurations. The flaw in gd_xbm.c allows a long XBM image name to read process memory or trigger a stack-based buffer under-read, causing potential information disclosure or denial of service. ...

CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library aka libgd before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly...

CVE-2013-7456

CVE-2013-7456 affects the GD Graphics Library (libgd) prior to 2.1.1 used by PHP up to 5.5.36, 5.6.x up to 5.6.22, and 7.x up to 7.0.7. A crafted image mishandled by imagescale can trigger an out-of-bounds read and remote denial of service (partial/possible other impact). The Cloud Foundry adviso...

CVE-2016-5767

The CVE-2016-5767 issue is an integer overflow in the GD library’s gdImageCreate function used by the PHP gd extension . A crafted GD image can trigger a remote denial of service via a heap-based buffer overflow. Affected ranges include PHP builds that embed libgd before 2.0.34RC1, specifically P...