Heap-based Buffer Overflow

libgd.so is vulnerable to heap-based buffer overflows. The overflows can be triggered when the function gdImageTiffPtr of gd_tiff.c reads input images of GD and GD2 formats and does not check the transparent index bounds of the palette. Note: this CVE is disputed because the vendor suggested GD and GD2 formats should only be use for testing purposes.