LI
Product
Libgd
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 13Medium 12Low 0
Watch
Add Libgd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6978 | 9.8 | Jan 28 | The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c Affected: 2.2.5 |
| CVE-2016-10166 | 9.8 | Mar 15 | Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified… Affected: through 2.2.3 |
| CVE-2016-6912 | 9.8 | Jan 26 | Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and… Affected: through 2.2.3 |
| CVE-2016-8670 | 9.8 | Jan 4 | Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13,… Affected: through 2.2.3 |
| CVE-2016-7568 | 9.8 | Sep 28 | Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause… Affected: through 2.2.3 |
| CVE-2016-3074 | 9.8 | Apr 26 | Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via… Affected: 2.1.1 |
| CVE-2016-5116 | 9.1 | Aug 7 | gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive… Affected: through 2.2.1 |
| CVE-2019-6977 | 8.8 | Jan 27 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before… Affected: 2.2.5 |
| CVE-2018-1000222 | 8.8 | Aug 20 | Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution Affected: 2.2.5 |
| CVE-2016-5767 | 8.8 | Aug 7 | Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before… Affected: through 2.0.33 |
| CVE-2016-5766 | 8.8 | Aug 7 | Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before… Affected: 2.2.2 |
| CVE-2017-6363 | 8.1 | Feb 27 | In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c Affected: through 2.2.5 |
| CVE-2016-10168 | 7.8 | Mar 15 | Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal… Affected: through 2.2.3 |
| CVE-2013-7456 | 7.6 | Aug 7 | gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a… Affected: 2.1.0 |
| CVE-2021-40145 | 7.5 | Aug 26 | gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free Affected: through 2.3.2 |
| CVE-2018-14553 | 7.5 | Feb 11 | gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence Affected: 2.1.1 through 2.2.5; 2.1.0; 2.1.0 |
| CVE-2017-6362 | 7.5 | Sep 7 | Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors Affected: 2.2.4 |
| CVE-2016-9933 | 7.5 | Jan 4 | Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before… Affected: 2.2.1 |
| CVE-2016-6128 | 7.5 | Aug 7 | The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of… Affected: through 2.2.2 |
| CVE-2015-8877 | 7.5 | May 22 | The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free… Affected: through 2.1.1 |
| CVE-2021-40812 | 6.5 | Sep 8 | The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks Affected: through 2.3.2 |
| CVE-2021-38115 | 6.5 | Aug 4 | read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file Affected: through 2.3.2 |
| CVE-2016-6905 | 6.5 | Oct 3 | The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… Affected: through 2.2.2 |
| CVE-2016-6214 | 6.5 | Aug 12 | gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file Affected: through 2.2.2 |
| CVE-2016-6207 | 6.5 | Aug 12 | Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service… Affected: through 2.2.2 |
| CVE-2016-6161 | 6.5 | Aug 12 | The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image Affected: through 2.2.2 |
| CVE-2016-6132 | 6.5 | Aug 12 | The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… Affected: through 2.2.2 |
| CVE-2016-10167 | 5.5 | Mar 15 | The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a… Affected: through 2.2.3 |
| CVE-2016-6906 | 5.5 | Mar 15 | The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… Affected: through 2.2.3 |
| CVE-2016-9317 | 5.5 | Jan 26 | The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image Affected: through 2.2.3 |
| CVE-2016-6911 | 5.5 | Jan 26 | The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image Affected: through 2.2.3 |
| CVE-2019-11038 | 5.3 | Jun 19 | When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19… Affected: 2.2.5 |
| CVE-2014-9709 | – | Mar 30 | The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer… Affected: through 2.1.1 |
| CVE-2007-2756 | – | May 18 | The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes… Affected: 2.0.34 |
Showing 34