LI
Product
Libgd
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 13Medium 12Low 0
Watch
Add Libgd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6977 | 8.8 | Jan 27 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before… Affected: 2.2.5 |
| CVE-2018-1000222 | 8.8 | Aug 20 | Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution Affected: 2.2.5 |
| CVE-2016-5767 | 8.8 | Aug 7 | Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before… Affected: through 2.0.33 |
| CVE-2016-5766 | 8.8 | Aug 7 | Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before… Affected: 2.2.2 |
| CVE-2017-6363 | 8.1 | Feb 27 | In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c Affected: through 2.2.5 |
| CVE-2016-10168 | 7.8 | Mar 15 | Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal… Affected: through 2.2.3 |
| CVE-2013-7456 | 7.6 | Aug 7 | gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a… Affected: 2.1.0 |
| CVE-2021-40145 | 7.5 | Aug 26 | gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free Affected: through 2.3.2 |
| CVE-2018-14553 | 7.5 | Feb 11 | gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence Affected: 2.1.1 through 2.2.5; 2.1.0; 2.1.0 |
| CVE-2017-6362 | 7.5 | Sep 7 | Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors Affected: 2.2.4 |
| CVE-2016-9933 | 7.5 | Jan 4 | Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before… Affected: 2.2.1 |
| CVE-2016-6128 | 7.5 | Aug 7 | The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of… Affected: through 2.2.2 |
| CVE-2015-8877 | 7.5 | May 22 | The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free… Affected: through 2.1.1 |
Showing 13