CVE-2016-6128

CVE-2016-6128 affects the GD Graphics Library (libgd), specifically the gdImageCropThreshold function in gd_crop.c, with vulnerable pre-2.2.3 releases used by PHP prior to 7.0.9. Exploitation can cause an application crash (denial of service) via an invalid color index. Public advisories and vend...

CVE-2016-5766

Integer overflow in the gd2GetHeader function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly ha...

CVE-2016-5116

The CVE applies to the GD Graphics Library (libgd) prior to version 2.2.0, used in certain PHP 5.5.x configurations. The flaw in gd_xbm.c allows a long XBM image name to read process memory or trigger a stack-based buffer under-read, causing potential information disclosure or denial of service. ...

CVE-2013-7456

gdinterpolation.c in the GD Graphics Library aka libgd before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted image that is mishandled by...

CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library aka libgd before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly...

CVE-2016-5767

The CVE-2016-5767 issue is an integer overflow in the GD library’s gdImageCreate function used by the PHP gd extension . A crafted GD image can trigger a remote denial of service via a heap-based buffer overflow. Affected ranges include PHP builds that embed libgd before 2.0.34RC1, specifically P...

CVE-2013-7456

CVE-2013-7456 affects the GD Graphics Library (libgd) prior to 2.1.1 used by PHP up to 5.5.36, 5.6.x up to 5.6.22, and 7.x up to 7.0.7. A crafted image mishandled by imagescale can trigger an out-of-bounds read and remote denial of service (partial/possible other impact). The Cloud Foundry adviso...

CVE-2016-5767

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library aka libgd before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly...

CVE-2016-6128

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-5116: Improper Restriction of Operations within the Bounds of a Memory Buffer

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

CVE-2016-6128: Improper Input Validation

The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...

CVE-2016-5766: Integer Overflow or Wraparound

Integer overflow in the gd2GetHeader function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly ha...

CVE-2013-7456: Out-of-bounds Read

gdinterpolation.c in the GD Graphics Library aka libgd before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted image that is mishandled by...

MGASA-2016-0258 Updated libgd packages fix security vulnerability

Updated libgd packages fix security vulnerabilities: A read out-of-bounds was found in the parsing of TGA files when the header reports an incorrect size CVE-2016-6132 or invalid bpp CVE-2016-6214 or RLE value upstream issue 248. Integer overflow error within gdContributionsAlloc CVE-2016-6207. A...

Updated libgd packages fix security vulnerability

Updated libgd packages fix security vulnerabilities: A read out-of-bounds was found in the parsing of TGA files when the header reports an incorrect size CVE-2016-6132 or invalid bpp CVE-2016-6214 or RLE value upstream issue 248. Integer overflow error within gdContributionsAlloc CVE-2016-6207. A...

Fedora 24 : gd (2016-615f3bf06e)

LibGD 2.2.3 release Security related fixes: This flaw is caused by loading data from external sources file, custom ctx, etc and are hard to validate before calling libgd APIs : - fix php bug php72339, Integer Overflow in gd2GetHeader CVE-2016-5766 - bug 248, fix Out-Of-Bounds Read in readimagetga...

PT-2016-6799

Name of the Vulnerable Software and Affected Versions GD Graphics Library aka libgd versions prior to 2.2.3 Description The issue is related to an integer overflow in the gdContributionsAlloc function in gd interpolation.c, which can be exploited by remote attackers to cause a denial of service...

WS-2016-7114

Libgd in versions gd-2.1.0-alpha1 to gd-2.1.1 is vulnerable to out-of-bounds access...

libgd Heap Buffer Overflow Vulnerability

libgd also known as GD Graphics Library or libgd2 is an American software developer Thomas Boutell developed an open source library for dynamically creating images . A heap buffer overflow vulnerability exists in libgd, which can be exploited by an attacker to execute arbitrary code in an affecte...

PT-2016-7160

Name of the Vulnerable Software and Affected Versions GD Graphics Library aka libgd versions prior to 2.2.3 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image. This is due to a problem in the read image tga function in gd tga.c...