High severity · published Mar 15, 2017
CVE-2016-10168
Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal…
7.8
CVSS
3.7%
EPSS
No
On KEV
Description
Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libgd · Libgd
through 2.2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10168
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10168
Vendor Advisory
http://libgd.github.io/release-2.2.4.html
www.debian.org
http://www.debian.org/security/2017/dsa-3777
Mailing List
http://www.openwall.com/lists/oss-security/2017/01/26/1
Mailing List
http://www.openwall.com/lists/oss-security/2017/01/28/6
Third Party Advisory
http://www.securityfocus.com/bid/95869
www.securitytracker.com
http://www.securitytracker.com/id/1037659
More from Libgd
9.8
CVE-2019-6978
The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c
9.8
CVE-2016-10166
Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified…
9.8
CVE-2016-6912
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and…
9.8
CVE-2016-8670
Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13,…
9.8
CVE-2016-7568
Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause…