Approved changes feed: RSS · Atom

cpe:2.3:a:libgd:libgd:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

VendorLibgd (44c2ee20-8d26-5c2f-ba07-25982379a604)
ProductLibgd (f01680d4-6ae8-5e4b-92bc-9587377df70e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libgd-dev purl2cpe 2026-06-01 10:15:32.490646
pkg:deb/debian/libgd3 purl2cpe 2026-06-01 10:15:32.490645
pkg:deb/ubuntu/libgd-dev purl2cpe 2026-06-01 10:15:32.490649
pkg:deb/ubuntu/libgd3 purl2cpe 2026-06-01 10:15:32.490647
pkg:github/libgd/libgd purl2cpe 2026-06-01 10:15:32.490650

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3074 vulnerable 2026-06-08 05:07:44.275048 Details available
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.
Published: 2016-04-26T14:00:00.000Z
Updated: 2024-08-05T23:40:15.563Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.