Libgd

Libgd

34 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2016-10168

  • EPSS 0.66%
  • Veröffentlicht 15.03.2017 15:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.

5.5

CVE-2016-10167

  • EPSS 0.98%
  • Veröffentlicht 15.03.2017 15:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.

9.8

CVE-2016-10166

  • EPSS 8.33%
  • Veröffentlicht 15.03.2017 15:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.

5.5

CVE-2016-6906

  • EPSS 0.45%
  • Veröffentlicht 15.03.2017 14:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file, related to the decompression buffer.

5.5

CVE-2016-6911

  • EPSS 0.67%
  • Veröffentlicht 26.01.2017 15:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.

7.1

CVE-2016-9317

  • EPSS 1.09%
  • Veröffentlicht 26.01.2017 15:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.

9.8

CVE-2016-6912

  • EPSS 0.88%
  • Veröffentlicht 26.01.2017 15:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

7.5

CVE-2016-9933

  • EPSS 11.1%
  • Veröffentlicht 04.01.2017 20:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation vi...

9.8

CVE-2016-8670

  • EPSS 1.67%
  • Veröffentlicht 04.01.2017 20:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer ov...

6.5

CVE-2016-6905

  • EPSS 1.09%
  • Veröffentlicht 03.10.2016 21:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.