Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.
2016-08-07T10:59:13.663
2025-04-12T10:46:40.837
Deferred
CVSSv3.0: 8.8 (HIGH)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | redhat | openshift | 2.0 | Yes |
| Operating System | freebsd | freebsd | 8.3 | Yes |
| Operating System | redhat | enterprise_linux | 6.0 | Yes |
| Operating System | freebsd | freebsd | 8.0 | Yes |
| Operating System | redhat | enterprise_linux | 5 | Yes |
| Application | libgd | libgd | 2.2.2 | Yes |
| Application | php | php | ≤ 5.5.36 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.0 | No |
| Application | php | php | 5.6.1 | No |
| Application | php | php | 5.6.2 | No |
| Application | php | php | 5.6.3 | No |
| Application | php | php | 5.6.4 | No |
| Application | php | php | 5.6.5 | No |
| Application | php | php | 5.6.6 | No |
| Application | php | php | 5.6.7 | No |
| Application | php | php | 5.6.8 | No |
| Application | php | php | 5.6.9 | No |
| Application | php | php | 5.6.10 | No |
| Application | php | php | 5.6.11 | No |
| Application | php | php | 5.6.12 | No |
| Application | php | php | 5.6.13 | No |
| Application | php | php | 5.6.14 | No |
| Application | php | php | 5.6.15 | No |
| Application | php | php | 5.6.16 | No |
| Application | php | php | 5.6.17 | No |
| Application | php | php | 5.6.18 | No |
| Application | php | php | 5.6.19 | No |
| Application | php | php | 5.6.20 | No |
| Application | php | php | 5.6.21 | No |
| Application | php | php | 5.6.22 | No |
| Application | php | php | 7.0.0 | No |
| Application | php | php | 7.0.1 | No |
| Application | php | php | 7.0.2 | No |
| Application | php | php | 7.0.3 | No |
| Application | php | php | 7.0.4 | No |
| Application | php | php | 7.0.5 | No |
| Application | php | php | 7.0.6 | No |
| Application | php | php | 7.0.7 | No |
| Operating System | freebsd | freebsd | 10.0 | Yes |
| Operating System | fedoraproject | fedora | 23 | Yes |
| Operating System | debian | debian_linux | 8.0 | Yes |
| Operating System | freebsd | freebsd | 10.1 | Yes |
| Operating System | fedoraproject | fedora | 24 | Yes |
| Operating System | freebsd | freebsd | 8.4 | Yes |
| Operating System | freebsd | freebsd | 9.2 | Yes |
| Operating System | freebsd | freebsd | 8.2 | Yes |
| Operating System | freebsd | freebsd | 8.1 | Yes |
| Operating System | freebsd | freebsd | 9.0 | Yes |
| Operating System | freebsd | freebsd | 10.2 | Yes |
| Operating System | fedoraproject | fedora | 22 | Yes |
| Operating System | freebsd | freebsd | 9.3 | Yes |
| Operating System | redhat | enterprise_linux | 7.0 | Yes |
| Operating System | freebsd | freebsd | 10.3 | Yes |
| Operating System | freebsd | freebsd | 9.1 | Yes |