LI
Vendor
Libgd
39
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-40812 | LI Libgd Libgd | 6.5 | Sep 8 | The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks |
| CVE-2021-40145 | LI Libgd Libgd | 7.5 | Aug 26 | gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free |
| CVE-2021-38115 | LI Libgd Libgd | 6.5 | Aug 4 | read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file |
| CVE-2017-6363 | LI Libgd Libgd | 8.1 | Feb 27 | In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c |
| CVE-2018-14553 | LI Libgd Libgd | 7.5 | Feb 11 | gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence |
| CVE-2019-11038 | LI Libgd Libgd | 5.3 | Jun 19 | When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19… |
| CVE-2019-6978 | LI Libgd Libgd | 9.8 | Jan 28 | The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c |
| CVE-2019-6977 | LI Libgd Libgd | 8.8 | Jan 27 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before… |
| CVE-2018-1000222 | LI Libgd Libgd | 8.8 | Aug 20 | Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution |
| CVE-2017-6362 | LI Libgd Libgd | 7.5 | Sep 7 | Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors |
| CVE-2016-10168 | LI Libgd Libgd | 7.8 | Mar 15 | Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal… |
| CVE-2016-10167 | LI Libgd Libgd | 5.5 | Mar 15 | The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a… |
| CVE-2016-10166 | LI Libgd Libgd | 9.8 | Mar 15 | Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified… |
| CVE-2016-6906 | LI Libgd Libgd | 5.5 | Mar 15 | The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… |
| CVE-2016-9317 | LI Libgd Libgd | 5.5 | Jan 26 | The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image |
| CVE-2016-6912 | LI Libgd Libgd | 9.8 | Jan 26 | Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and… |
| CVE-2016-6911 | LI Libgd Libgd | 5.5 | Jan 26 | The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image |
| CVE-2016-9933 | LI Libgd Libgd | 7.5 | Jan 4 | Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before… |
| CVE-2016-8670 | LI Libgd Libgd | 9.8 | Jan 4 | Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13,… |
| CVE-2016-6905 | LI Libgd Libgd | 6.5 | Oct 3 | The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… |
| CVE-2016-7568 | LI Libgd Libgd | 9.8 | Sep 28 | Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause… |
| CVE-2016-6214 | LI Libgd Libgd | 6.5 | Aug 12 | gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file |
| CVE-2016-6207 | LI Libgd Libgd | 6.5 | Aug 12 | Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service… |
| CVE-2016-6161 | LI Libgd Libgd | 6.5 | Aug 12 | The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image |
| CVE-2016-6132 | LI Libgd Libgd | 6.5 | Aug 12 | The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… |
| CVE-2016-6128 | LI Libgd Libgd | 7.5 | Aug 7 | The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of… |
| CVE-2016-5767 | LI Libgd Libgd | 8.8 | Aug 7 | Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before… |
| CVE-2016-5766 | LI Libgd Libgd | 8.8 | Aug 7 | Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before… |
| CVE-2016-5116 | LI Libgd Libgd | 9.1 | Aug 7 | gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive… |
| CVE-2013-7456 | LI Libgd Libgd | 7.6 | Aug 7 | gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a… |
| CVE-2015-8877 | LI Libgd Libgd | 7.5 | May 22 | The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free… |
| CVE-2016-3074 | LI Libgd Libgd | 9.8 | Apr 26 | Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via… |
| CVE-2014-9709 | LI Libgd Libgd | – | Mar 30 | The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer… |
| CVE-2009-3546 | GG GD Graphics Library Libgd | – | Oct 19 | The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which… |
| CVE-2007-3472 | GG GD Graphics Library Libgd | – | Jun 28 | Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and… |
| CVE-2007-3477 | GG GD Graphics Library Libgd | – | Jun 28 | The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start… |
| CVE-2007-3474 | GG GD Graphics Library Libgd | – | Jun 28 | Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors |
| CVE-2007-3473 | GG GD Graphics Library Libgd | – | Jun 28 | The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors… |
| CVE-2007-2756 | LI Libgd Libgd | – | May 18 | The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes… |