Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade racketUpgrade libgd2 | Jul 30, 2024 | Jun 28, 2007 |
| Freebsd | — | Upgrade gd | Dec 10, 2025 | Jun 29, 2007 |
| Gentoo Linux | — | Upgrade media-libs/gd. | Oct 30, 2017 | Jun 28, 2007 |
| Oracle_linux | — | Upgrade gd-develUpgrade gdUpgrade gd-progs | Oct 16, 2024 | Jun 28, 2007 |
| Suse | — | Upgrade php5-iconvUpgrade php5-sqliteUpgrade php4-mbstringUpgrade php4-bz2Upgrade php5-opensslUpgrade php5-shmopUpgrade php4-develUpgrade php5-pspellUpgrade php5-pearUpgrade php5-mcryptUpgrade php4-ctypeUpgrade php4-iconvUpgrade php4-snmpUpgrade php5-ncursesUpgrade php5-curlUpgrade php5-mhashUpgrade php5-ctypeUpgrade php5-exifUpgrade php5-xmlreaderUpgrade php4-exifUpgrade php4-pearUpgrade php4-ypUpgrade php5-tidyUpgrade php5-bz2Upgrade php4-recodeUpgrade php5-imapUpgrade gd-develUpgrade php4-qtdomUpgrade php5-domUpgrade php5-socketsUpgrade php4-dbaUpgrade php5-sysvmsgUpgrade php5-sysvsemUpgrade suse-releaseUpgrade php5-gettextUpgrade php4-shmopUpgrade php5-xmlrpcUpgrade php5-ldapUpgrade php5-gdUpgrade php4-mhashUpgrade php4-swfUpgrade php5-fastcgiUpgrade php5-xslUpgrade php5-suhosinUpgrade php4-readlineUpgrade php5-snmpUpgrade mod_php4-coreUpgrade php5-bcmathUpgrade php5-mbstringUpgrade php4-wddxUpgrade gdUpgrade php4-mime_magicUpgrade php4-xsltUpgrade php4-fastcgiUpgrade php5-develUpgrade php5-odbcUpgrade php5-dbaUpgrade php5-calendarUpgrade php4-sysvsemUpgrade php5-pgsqlUpgrade php5-posixUpgrade apache-mod_php4Upgrade php4-domxmlUpgrade apache2-mod_php5Upgrade php5-mysqlUpgrade php4-socketsUpgrade php4-ftpUpgrade mod_php4-apache2Upgrade php4-gdUpgrade php5-pcntlUpgrade php4-fileproUpgrade php5-jsonUpgrade php5-dbaseUpgrade php5-gmpUpgrade php5-tokenizerUpgrade php4-mcalUpgrade php4-unixODBCUpgrade php4-mcryptUpgrade php4-gettextUpgrade php5-pdoUpgrade php5-xmlwriterUpgrade php5-wddxUpgrade php4-ldapUpgrade php5-zlibUpgrade php4-imapUpgrade php4-sysvshmUpgrade php5-zipUpgrade php4-mysqlUpgrade php5-soapUpgrade php5-hashUpgrade php4-gmpUpgrade mod_php4-servletUpgrade php4-sessionUpgrade php4-curlUpgrade apache2-mod_php4Upgrade php5-ftpUpgrade php4-bcmathUpgrade php4-pgsqlUpgrade php5-sysvshmUpgrade php4-zlibUpgrade php4-dbaseUpgrade php4-calendar | Feb 17, 2015 | Jun 28, 2007 |
| Ubuntu | — | Upgrade libgd2-noxpmUpgrade libgd2-xpm | Nov 8, 2024 | Jun 28, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub