CVE-2016-6214: Out-of-bounds Read

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

DEBIAN-CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-5116

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

DEBIAN-CVE-2016-5116

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

Stack overflow

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

CVE-2016-6128

CVE-2016-6128 affects the GD Graphics Library (libgd), specifically the gdImageCropThreshold function in gd_crop.c, with vulnerable pre-2.2.3 releases used by PHP prior to 7.0.9. Exploitation can cause an application crash (denial of service) via an invalid color index. Public advisories and vend...

CVE-2016-5766

CVE-2016-5766 affects the GD Graphics Library (libgd) via an integer overflow in _gd2GetHeader() in gd_gd2.c, before libgd 2.2.3. This can cause a heap-based overflow when processing crafted GD2 images, leading to a denial of service (and potentially other impact) on the host application using th...

CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-5767

The CVE-2016-5767 issue is an integer overflow in the GD library’s gdImageCreate function used by the PHP gd extension . A crafted GD image can trigger a remote denial of service via a heap-based buffer overflow. Affected ranges include PHP builds that embed libgd before 2.0.34RC1, specifically P...

CVE-2016-5116

The CVE applies to the GD Graphics Library (libgd) prior to version 2.2.0, used in certain PHP 5.5.x configurations. The flaw in gd_xbm.c allows a long XBM image name to read process memory or trigger a stack-based buffer under-read, causing potential information disclosure or denial of service. ...

CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library aka libgd before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly...

CVE-2013-7456

CVE-2013-7456 affects the GD Graphics Library (libgd) prior to 2.1.1 used by PHP up to 5.5.36, 5.6.x up to 5.6.22, and 7.x up to 7.0.7. A crafted image mishandled by imagescale can trigger an out-of-bounds read and remote denial of service (partial/possible other impact). The Cloud Foundry adviso...

CVE-2016-5116

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library aka libgd before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly...

CVE-2016-6128: Improper Input Validation

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-5766: Integer Overflow or Wraparound

Integer overflow in the gd2GetHeader function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly ha...

CVE-2016-5116: Improper Restriction of Operations within the Bounds of a Memory Buffer

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

CVE-2013-7456: Out-of-bounds Read

gdinterpolation.c in the GD Graphics Library aka libgd before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted image that is mishandled by...

Updated libgd packages fix security vulnerability

Updated libgd packages fix security vulnerabilities: A read out-of-bounds was found in the parsing of TGA files when the header reports an incorrect size CVE-2016-6132 or invalid bpp CVE-2016-6214 or RLE value upstream issue 248. Integer overflow error within gdContributionsAlloc CVE-2016-6207. A...