CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

PT-2016-3143

Name of the Vulnerable Software and Affected Versions GD Graphics Library versions prior to 2.2.4 PHP versions prior to 5.6.28 and 7.x prior to 7.0.13 Description The issue is caused by an integer signedness error in the dynamicGetbuf function in gd io dp.c of the GD Graphics Library. This error...

PT-2016-7163

Name of the Vulnerable Software and Affected Versions GD Graphics Library versions prior to 2.2.4 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image. This is related to the dynamicGetbuf function. Recommendations For versions pri...

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

UBUNTU-CVE-2016-6911

The dynamicGetbuf function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

Internet Bug Bounty: Stack Buffer Overflow in GD dynamicGetbuf

Stack-based buffer over flow in GD dynamicGetbuf - Vulnerable function: imagecreatefromstring - Bug has been reported: https://bugs.php.net/bug.php?id=73280 - Submitted a patch and accepted: https://github.com/php/php-src/commit/cc08cbc84d46933c1e9e0149633f1ed5d19e45e9 - Impact: Remotely...