Libgd Libgd 2.2.5
Approved changes feed: RSS · Atom
cpe:2.3:a:libgd:libgd:2.2.5:*:*:*:*:*:*:*
part: a version: 2.2.5 update: *
| Vendor | Libgd (44c2ee20-8d26-5c2f-ba07-25982379a604) |
|---|---|
| Product | Libgd (f01680d4-6ae8-5e4b-92bc-9587377df70e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libgd-dev |
purl2cpe | 2026-06-01 10:15:32.490689 |
pkg:deb/debian/libgd3 |
purl2cpe | 2026-06-01 10:15:32.490687 |
pkg:deb/ubuntu/libgd-dev |
purl2cpe | 2026-06-01 10:15:32.490692 |
pkg:deb/ubuntu/libgd3 |
purl2cpe | 2026-06-01 10:15:32.490690 |
pkg:github/libgd/libgd |
purl2cpe | 2026-06-01 10:15:32.490693 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-6978 |
vulnerable | 2026-06-08 05:14:13.592457 |
Details available
The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.
Published: 2019-01-28T07:00:00.000Z
Updated: 2024-08-04T20:38:32.579Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6977 |
vulnerable | 2026-06-08 05:14:13.587262 |
Details available
gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.
Published: 2019-01-27T02:00:00.000Z
Updated: 2024-08-04T20:38:32.847Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11038 |
vulnerable | 2026-06-08 05:12:26.259269 |
Uninitialized read in gdImageCreateFromXbm
LOW (3.1)
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
Published: 2019-06-18T23:28:28.236Z
Updated: 2024-09-16T21:04:15.889Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000222 |
vulnerable | 2026-06-08 05:10:25.661199 |
Details available
Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
Published: 2018-08-20T20:00:00.000Z
Updated: 2024-08-05T12:40:46.684Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.