Internet Bug Bounty: imagecropauto out-of-bounds access

Upstream Bug --- https://bugs.php.net/bug.php?id=72494 Summary --- imagecropauto on IMGCROPTHRESHOLD mode causes arbitrary read access and possible leak of information. The function imagecropauto doesn't check valid colors for non-truecolor images. This causes that gdImageRed/Green/Blue/Alpha...

CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-6128: Improper Input Validation

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

PT-2016-6760

Name of the Vulnerable Software and Affected Versions GD Graphics Library versions prior to 2.2.3 PHP versions prior to 7.0.9 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via an invalid color index. This is due to a problem in the...