CVEvulnerability
CVE-2016-6912
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-01-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-415
Description
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
Affected configurations
• libgd libgd (<= 2.2.3)
Related
Weakness · CWE (1)
- CWE-415 Double Free weakness
References
- http://www.debian.org/security/2017/dsa-3777 www.debian.org
- http://www.securityfocus.com/bid/95843 www.securityfocus.com
- https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md Patch, Release Notes
- https://github.com/libgd/libgd/commit/a49feeae76d41959d85ee733925a4cf40bac61b2 Patch, Vendor Advisory
- http://www.debian.org/security/2017/dsa-3777 www.debian.org
- http://www.securityfocus.com/bid/95843 www.securityfocus.com
- https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md Patch, Release Notes
- https://github.com/libgd/libgd/commit/a49feeae76d41959d85ee733925a4cf40bac61b2 Patch, Vendor Advisory