The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gdalma-upgrade-gd-develalma-upgrade-libwmfalma-upgrade-libwmf-develalma-upgrade-libwmf-lite | May 4, 2022 | Jan 28, 2019 | |
| Alpine Linux | alpine-linux-upgrade-gd | Apr 16, 2019 | Jan 28, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libwmfamazon-linux-ami-2-upgrade-libwmf-debuginfoamazon-linux-ami-2-upgrade-libwmf-develamazon-linux-ami-2-upgrade-libwmf-lite | Apr 27, 2020 | Jan 28, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-libwmf | Apr 1, 2019 | Jan 28, 2019 |
| Centos_linux | — | centos-upgrade-gdcentos-upgrade-gd-debuginfocentos-upgrade-gd-debugsourcecentos-upgrade-gd-develcentos-upgrade-gd-progs-debuginfocentos-upgrade-libwmfcentos-upgrade-libwmf-debuginfocentos-upgrade-libwmf-debugsourcecentos-upgrade-libwmf-develcentos-upgrade-libwmf-litecentos-upgrade-libwmf-lite-debuginfo | Sep 12, 2019 | Jan 28, 2019 |
| Debian | debian-upgrade-libgd2 | Feb 6, 2019 | Jan 28, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-gd | Mar 29, 2019 | Jan 28, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-gd | Jul 23, 2019 | Jan 28, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-gd | Mar 27, 2019 | Jan 28, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-gd | Mar 11, 2019 | Jan 28, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-gd | Jun 27, 2019 | Jan 28, 2019 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-gd-2-0-35-0-175-3-36-0-17-0oracle-solaris-11-4-upgrade-library-gd-2-2-5-11-4-16-0-1-2-0 | Dec 18, 2019 | Jan 28, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-gdoracle-linux-upgrade-gd-develoracle-linux-upgrade-libwmforacle-linux-upgrade-libwmf-develoracle-linux-upgrade-libwmf-lite | Jul 21, 2020 | Jan 15, 2019 |
| Redhat_linux | redhat-upgrade-gdredhat-upgrade-gd-debuginforedhat-upgrade-gd-debugsourceredhat-upgrade-gd-develredhat-upgrade-gd-progs-debuginforedhat-upgrade-libwmfredhat-upgrade-libwmf-debuginforedhat-upgrade-libwmf-debugsourceredhat-upgrade-libwmf-develredhat-upgrade-libwmf-literedhat-upgrade-libwmf-lite-debuginfo | Sep 12, 2019 | Jan 28, 2019 | |
| Rocky_linux | rocky-upgrade-gdrocky-upgrade-gd-debuginforocky-upgrade-gd-debugsourcerocky-upgrade-gd-develrocky-upgrade-libwmfrocky-upgrade-libwmf-debuginforocky-upgrade-libwmf-debugsourcerocky-upgrade-libwmf-develrocky-upgrade-libwmf-literocky-upgrade-libwmf-lite-debuginfo | Mar 12, 2024 | Jan 28, 2019 | |
| Suse | — | suse-upgrade-apache2-mod_php53suse-upgrade-apache2-mod_php7suse-upgrade-gdsuse-upgrade-gd-32bitsuse-upgrade-gd-develsuse-upgrade-libgd3suse-upgrade-libgd3-32bitsuse-upgrade-php53suse-upgrade-php53-bcmathsuse-upgrade-php53-bz2suse-upgrade-php53-calendarsuse-upgrade-php53-ctypesuse-upgrade-php53-curlsuse-upgrade-php53-dbasuse-upgrade-php53-develsuse-upgrade-php53-domsuse-upgrade-php53-exifsuse-upgrade-php53-fastcgisuse-upgrade-php53-fileinfosuse-upgrade-php53-ftpsuse-upgrade-php53-gdsuse-upgrade-php53-gettextsuse-upgrade-php53-gmpsuse-upgrade-php53-iconvsuse-upgrade-php53-imapsuse-upgrade-php53-intlsuse-upgrade-php53-jsonsuse-upgrade-php53-ldapsuse-upgrade-php53-mbstringsuse-upgrade-php53-mcryptsuse-upgrade-php53-mysqlsuse-upgrade-php53-odbcsuse-upgrade-php53-opensslsuse-upgrade-php53-pcntlsuse-upgrade-php53-pdosuse-upgrade-php53-pearsuse-upgrade-php53-pgsqlsuse-upgrade-php53-posixsuse-upgrade-php53-pspellsuse-upgrade-php53-readlinesuse-upgrade-php53-shmopsuse-upgrade-php53-snmpsuse-upgrade-php53-soapsuse-upgrade-php53-socketssuse-upgrade-php53-sqlitesuse-upgrade-php53-suhosinsuse-upgrade-php53-sysvmsgsuse-upgrade-php53-sysvsemsuse-upgrade-php53-sysvshmsuse-upgrade-php53-tidysuse-upgrade-php53-tokenizersuse-upgrade-php53-wddxsuse-upgrade-php53-xmlreadersuse-upgrade-php53-xmlrpcsuse-upgrade-php53-xmlwritersuse-upgrade-php53-xslsuse-upgrade-php53-zipsuse-upgrade-php53-zlibsuse-upgrade-php7suse-upgrade-php7-bcmathsuse-upgrade-php7-bz2suse-upgrade-php7-calendarsuse-upgrade-php7-ctypesuse-upgrade-php7-curlsuse-upgrade-php7-dbasuse-upgrade-php7-develsuse-upgrade-php7-domsuse-upgrade-php7-enchantsuse-upgrade-php7-exifsuse-upgrade-php7-fastcgisuse-upgrade-php7-fileinfosuse-upgrade-php7-fpmsuse-upgrade-php7-ftpsuse-upgrade-php7-gdsuse-upgrade-php7-gettextsuse-upgrade-php7-gmpsuse-upgrade-php7-iconvsuse-upgrade-php7-imapsuse-upgrade-php7-intlsuse-upgrade-php7-jsonsuse-upgrade-php7-ldapsuse-upgrade-php7-mbstringsuse-upgrade-php7-mcryptsuse-upgrade-php7-mysqlsuse-upgrade-php7-odbcsuse-upgrade-php7-opcachesuse-upgrade-php7-opensslsuse-upgrade-php7-pcntlsuse-upgrade-php7-pdosuse-upgrade-php7-pearsuse-upgrade-php7-pear-archive_tarsuse-upgrade-php7-pgsqlsuse-upgrade-php7-pharsuse-upgrade-php7-posixsuse-upgrade-php7-pspellsuse-upgrade-php7-shmopsuse-upgrade-php7-snmpsuse-upgrade-php7-soapsuse-upgrade-php7-socketssuse-upgrade-php7-sqlitesuse-upgrade-php7-sysvmsgsuse-upgrade-php7-sysvsemsuse-upgrade-php7-sysvshmsuse-upgrade-php7-tokenizersuse-upgrade-php7-wddxsuse-upgrade-php7-xmlreadersuse-upgrade-php7-xmlrpcsuse-upgrade-php7-xmlwritersuse-upgrade-php7-xslsuse-upgrade-php7-zipsuse-upgrade-php7-zlib | Feb 13, 2019 | Jan 28, 2019 |
| Ubuntu | ubuntu-upgrade-libgd-toolsubuntu-upgrade-libgd3 | Mar 13, 2019 | Jan 28, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 28, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub