Libgd

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.

Published: 2021-09-08T00:00:00.000Z
Updated: 2024-10-29T13:45:44.111Z

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.

Published: 2021-08-26T00:34:17.000Z
Updated: 2024-08-04T02:27:31.617Z

read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.

Published: 2021-08-04T00:00:00.000Z
Updated: 2024-08-04T01:30:09.184Z

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

Published: 2020-02-11T00:00:00.000Z
Updated: 2024-08-05T09:29:51.696Z

In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion this issue should not have a CVE, since the GD and GD2 formats are documented to be 'obsolete, and should only be used for development and testing purposes.'

Published: 2020-02-27T04:06:43.000Z
Updated: 2024-08-05T15:25:49.223Z