Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-gd | Aug 30, 2017 | Apr 26, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade--php55amazon-linux-upgrade-php56 | May 3, 2016 | Apr 26, 2016 |
| Debian | debian-upgrade-libgd2 | Apr 26, 2016 | Apr 26, 2016 | |
| Freebsd | freebsd-upgrade-package-php70freebsd-upgrade-package-php70-bcmathfreebsd-upgrade-package-php70-exiffreebsd-upgrade-package-php70-gdfreebsd-upgrade-package-php70-xmlfreebsd-upgrade-package-php56freebsd-upgrade-package-php56-bcmathfreebsd-upgrade-package-php56-exiffreebsd-upgrade-package-php56-gdfreebsd-upgrade-package-php56-xmlfreebsd-upgrade-package-php55freebsd-upgrade-package-php55-bcmathfreebsd-upgrade-package-php55-exiffreebsd-upgrade-package-php55-gdfreebsd-upgrade-package-php55-xml | Dec 10, 2025 | May 3, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-phpgentoo-linux-upgrade-media-libs-gd | Oct 30, 2017 | Apr 26, 2016 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-gd | Dec 4, 2019 | Apr 26, 2016 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-gd | Dec 18, 2019 | Apr 26, 2016 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-gd | Feb 3, 2021 | Apr 26, 2016 | |
| Php | php-upgrade-5_5_35php-upgrade-5_6_21php-upgrade-7_0_6 | Sep 15, 2022 | Apr 26, 2016 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Apr 22, 2016 |
| Suse | — | suse-upgrade-apache2-mod_php5suse-upgrade-apache2-mod_php5-debuginfosuse-upgrade-php5suse-upgrade-php5-bcmathsuse-upgrade-php5-bcmath-debuginfosuse-upgrade-php5-bz2suse-upgrade-php5-bz2-debuginfosuse-upgrade-php5-calendarsuse-upgrade-php5-calendar-debuginfosuse-upgrade-php5-ctypesuse-upgrade-php5-ctype-debuginfosuse-upgrade-php5-curlsuse-upgrade-php5-curl-debuginfosuse-upgrade-php5-dbasuse-upgrade-php5-dba-debuginfosuse-upgrade-php5-debuginfosuse-upgrade-php5-debugsourcesuse-upgrade-php5-develsuse-upgrade-php5-domsuse-upgrade-php5-dom-debuginfosuse-upgrade-php5-enchantsuse-upgrade-php5-enchant-debuginfosuse-upgrade-php5-exifsuse-upgrade-php5-exif-debuginfosuse-upgrade-php5-fastcgisuse-upgrade-php5-fastcgi-debuginfosuse-upgrade-php5-fileinfosuse-upgrade-php5-fileinfo-debuginfosuse-upgrade-php5-firebirdsuse-upgrade-php5-firebird-debuginfosuse-upgrade-php5-fpmsuse-upgrade-php5-fpm-debuginfosuse-upgrade-php5-ftpsuse-upgrade-php5-ftp-debuginfosuse-upgrade-php5-gdsuse-upgrade-php5-gd-debuginfosuse-upgrade-php5-gettextsuse-upgrade-php5-gettext-debuginfosuse-upgrade-php5-gmpsuse-upgrade-php5-gmp-debuginfosuse-upgrade-php5-iconvsuse-upgrade-php5-iconv-debuginfosuse-upgrade-php5-imapsuse-upgrade-php5-imap-debuginfosuse-upgrade-php5-intlsuse-upgrade-php5-intl-debuginfosuse-upgrade-php5-jsonsuse-upgrade-php5-json-debuginfosuse-upgrade-php5-ldapsuse-upgrade-php5-ldap-debuginfosuse-upgrade-php5-mbstringsuse-upgrade-php5-mbstring-debuginfosuse-upgrade-php5-mcryptsuse-upgrade-php5-mcrypt-debuginfosuse-upgrade-php5-mssqlsuse-upgrade-php5-mssql-debuginfosuse-upgrade-php5-mysqlsuse-upgrade-php5-mysql-debuginfosuse-upgrade-php5-odbcsuse-upgrade-php5-odbc-debuginfosuse-upgrade-php5-opcachesuse-upgrade-php5-opcache-debuginfosuse-upgrade-php5-opensslsuse-upgrade-php5-openssl-debuginfosuse-upgrade-php5-pcntlsuse-upgrade-php5-pcntl-debuginfosuse-upgrade-php5-pdosuse-upgrade-php5-pdo-debuginfosuse-upgrade-php5-pearsuse-upgrade-php5-pgsqlsuse-upgrade-php5-pgsql-debuginfosuse-upgrade-php5-pharsuse-upgrade-php5-phar-debuginfosuse-upgrade-php5-posixsuse-upgrade-php5-posix-debuginfosuse-upgrade-php5-pspellsuse-upgrade-php5-pspell-debuginfosuse-upgrade-php5-readlinesuse-upgrade-php5-readline-debuginfosuse-upgrade-php5-shmopsuse-upgrade-php5-shmop-debuginfosuse-upgrade-php5-snmpsuse-upgrade-php5-snmp-debuginfosuse-upgrade-php5-soapsuse-upgrade-php5-soap-debuginfosuse-upgrade-php5-socketssuse-upgrade-php5-sockets-debuginfosuse-upgrade-php5-sqlitesuse-upgrade-php5-sqlite-debuginfosuse-upgrade-php5-suhosinsuse-upgrade-php5-suhosin-debuginfosuse-upgrade-php5-sysvmsgsuse-upgrade-php5-sysvmsg-debuginfosuse-upgrade-php5-sysvsemsuse-upgrade-php5-sysvsem-debuginfosuse-upgrade-php5-sysvshmsuse-upgrade-php5-sysvshm-debuginfosuse-upgrade-php5-tidysuse-upgrade-php5-tidy-debuginfosuse-upgrade-php5-tokenizersuse-upgrade-php5-tokenizer-debuginfosuse-upgrade-php5-wddxsuse-upgrade-php5-wddx-debuginfosuse-upgrade-php5-xmlreadersuse-upgrade-php5-xmlreader-debuginfosuse-upgrade-php5-xmlrpcsuse-upgrade-php5-xmlrpc-debuginfosuse-upgrade-php5-xmlwritersuse-upgrade-php5-xmlwriter-debuginfosuse-upgrade-php5-xslsuse-upgrade-php5-xsl-debuginfosuse-upgrade-php5-zipsuse-upgrade-php5-zip-debuginfosuse-upgrade-php5-zlibsuse-upgrade-php5-zlib-debuginfo | May 11, 2016 | Apr 26, 2016 |
| Ubuntu | ubuntu-upgrade-libgd2-noxpmubuntu-upgrade-libgd2-xpmubuntu-upgrade-libgd3 | May 31, 2016 | Apr 26, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub