Skip to main content
CVE-2016-6207 Aug 12, 15:59 MEDIUM PATCH This Month

Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

PHP Buffer Overflow Denial Of Service Debian Debian Linux +3
NVD
CVSS 3.1
6.5
EPSS
8.7%
CVE-2016-6214 Aug 12, 15:59 MEDIUM PATCH This Month

gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Denial Of Service Information Disclosure Debian Debian Linux +3
NVD GitHub
CVSS 3.0
6.5
EPSS
7.4%
CVE-2016-6132 Aug 12, 15:59 MEDIUM PATCH This Month

The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Denial Of Service Information Disclosure Debian Debian Linux +3
NVD GitHub
CVSS 3.0
6.5
EPSS
2.1%
CVE-2016-6161 Aug 12, 15:59 MEDIUM This Month

The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Debian Debian Linux +3
NVD GitHub
CVSS 3.0
6.5
EPSS
0.9%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy