The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gd | Mar 26, 2024 | Aug 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade gd-debuginfoUpgrade gdUpgrade gd-develUpgrade gd-progs | May 17, 2023 | Aug 26, 2021 |
| Amazon_linux | — | Upgrade gd | Apr 6, 2023 | Aug 26, 2021 |
| Debian | — | Upgrade libgd2 | Jul 30, 2024 | Aug 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gd | Feb 24, 2022 | Aug 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gd | Nov 12, 2021 | Aug 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gd | Nov 2, 2021 | Aug 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gd | Nov 12, 2021 | Aug 26, 2021 |
| Oracle Solaris | — | Upgrade library/gd to version 2.2.5-11.4.38.0.1.101.3 on Solaris 11.4 | Nov 17, 2021 | Aug 26, 2021 |
| Ubuntu | — | Upgrade libgd3Upgrade libgd3 (Ubuntu Pro) | Sep 9, 2021 | Aug 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 26, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub