libgd kayıtları
libgd üreticisine ait 39 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %97,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read10
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer6
- CWE-415 Double Free5
- CWE-190 Integer Overflow or Wraparound4
- CWE-20 Improper Input Validation3
- CWE-399 Resource Management Errors2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
39 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
56Planlayın | CVE-2019-6977Kavram kanıtı | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.libgd · libgd · CWE-787 | Yüksek8,8 | — | %71,5 | 26 Oca 2019 |
50Planlayın | CVE-2016-3074Kavram kanıtı | Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or libgd · libgd · CWE-681 | Kritik9,8 | — | %37,2 | 26 Nis 2016 |
42Planlayın | CVE-2016-10166İstismar yok | Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remlibgd · libgd · CWE-191 | Kritik9,8 | — | %10,7 | 15 Mar 2017 |
41Planlayın | CVE-2016-7568İstismar yok | Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.libgd · libgd · CWE-190 | Kritik9,8 | — | %5,1 | 28 Eyl 2016 |
40Planlayın | CVE-2009-3546İstismar yok | The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certaphp · php · CWE-119 | Kritik9,3 | — | %10,3 | 19 Eki 2009 |
40Planlayın | CVE-2016-8670İstismar yok | Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP belibgd · libgd · CWE-119 | Kritik9,8 | — | %4,8 | 4 Oca 2017 |
40Planlayın | CVE-2016-6912İstismar yok | Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have libgd · libgd · CWE-415 | Kritik9,8 | — | %4,5 | 26 Oca 2017 |
40Planlayın | CVE-2019-6978İstismar yok | The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c.libgd · libgd · CWE-415 | Kritik9,8 | — | %4,5 | 28 Oca 2019 |
37İzleyin | CVE-2016-5766İstismar yok | Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37libgd · libgd · CWE-190 | Yüksek8,8 | — | %7,5 | 7 Ağu 2016 |
37İzleyin | CVE-2016-5767İstismar yok | Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37libgd · libgd · CWE-190 | Yüksek8,8 | — | %6,7 | 7 Ağu 2016 |
37İzleyin | CVE-2016-5116İstismar yok | gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent alibgd · libgd · CWE-119 | Kritik9,1 | — | %3,8 | 7 Ağu 2016 |
36İzleyin | CVE-2018-1000222İstismar yok | Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution .libgd · libgd · CWE-415 | Yüksek8,8 | — | %4,2 | 20 Ağu 2018 |
32İzleyin | CVE-2016-9933İstismar yok | Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in libgd · libgd · CWE-119 | Yüksek7,5 | — | %6,9 | 4 Oca 2017 |
32İzleyin | CVE-2016-6128İstismar yok | The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remolibgd · libgd · CWE-20 | Yüksek7,5 | — | %6,8 | 7 Ağu 2016 |
32İzleyin | CVE-2017-6362İstismar yok | Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectlibgd · libgd · CWE-415 | Yüksek7,5 | — | %5,1 | 7 Eyl 2017 |
32İzleyin | CVE-2016-10168İstismar yok | Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectolibgd · libgd · CWE-190 | Yüksek7,8 | — | %3,7 | 15 Mar 2017 |
32İzleyin | CVE-2017-6363İstismar yok | In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c.libgd · libgd · CWE-125 | Yüksek8,1 | — | %1,4 | 27 Şub 2020 |
31İzleyin | CVE-2013-7456İstismar yok | gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.libgd · libgd · CWE-125 | Yüksek7,6 | — | %3,8 | 7 Ağu 2016 |
31İzleyin | CVE-2015-8877İstismar yok | The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uslibgd · libgd · CWE-399 | Yüksek7,5 | — | %3,6 | 21 May 2016 |
31İzleyin | CVE-2018-14553İstismar yok | gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a speciflibgd · libgd · CWE-476 | Yüksek7,5 | — | %3,4 | 11 Şub 2020 |
31İzleyin | CVE-2021-40145İstismar yok | gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free.libgd · libgd · CWE-415 | Yüksek7,5 | — | %2,1 | 25 Ağu 2021 |
28İzleyin | CVE-2016-6207İstismar yok | Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote alibgd · libgd · CWE-119 | Orta6,5 | — | %6,3 | 12 Ağu 2016 |
27İzleyin | CVE-2016-6132İstismar yok | The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of serviclibgd · libgd · CWE-125 | Orta6,5 | — | %3,3 | 12 Ağu 2016 |
27İzleyin | CVE-2016-6214İstismar yok | gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via alibgd · libgd · CWE-125 | Orta6,5 | — | %3,2 | 12 Ağu 2016 |
27İzleyin | CVE-2016-6161İstismar yok | The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounlibgd · libgd · CWE-125 | Orta6,5 | — | %2,8 | 12 Ağu 2016 |
- CVE-2019-697756Planlayın
gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.
YüksekCVSS 8,8Kavram kanıtıEPSS %71libgd · libgd26 Oca 2019
- CVE-2016-307450Planlayın
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or
KritikCVSS 9,8Kavram kanıtıEPSS %37libgd · libgd26 Nis 2016
- CVE-2016-1016642Planlayın
Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows rem
KritikCVSS 9,8İstismar yokEPSS %11libgd · libgd15 Mar 2017
- CVE-2016-756841Planlayın
Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.
KritikCVSS 9,8İstismar yokEPSS %5libgd · libgd28 Eyl 2016
- CVE-2009-354640Planlayın
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certa
KritikCVSS 9,3İstismar yokEPSS %10php · php19 Eki 2009
- CVE-2016-867040Planlayın
Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP be
KritikCVSS 9,8İstismar yokEPSS %5libgd · libgd4 Oca 2017
- CVE-2016-691240Planlayın
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have
KritikCVSS 9,8İstismar yokEPSS %4libgd · libgd26 Oca 2017
- CVE-2019-697840Planlayın
The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c.
KritikCVSS 9,8İstismar yokEPSS %4libgd · libgd28 Oca 2019
- CVE-2016-576637İzleyin
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37
YüksekCVSS 8,8İstismar yokEPSS %7libgd · libgd7 Ağu 2016
- CVE-2016-576737İzleyin
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37
YüksekCVSS 8,8İstismar yokEPSS %7libgd · libgd7 Ağu 2016
- CVE-2016-511637İzleyin
gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent a
KritikCVSS 9,1İstismar yokEPSS %4libgd · libgd7 Ağu 2016
- CVE-2018-100022236İzleyin
Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution .
YüksekCVSS 8,8İstismar yokEPSS %4libgd · libgd20 Ağu 2018
- CVE-2016-993332İzleyin
Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in
YüksekCVSS 7,5İstismar yokEPSS %7libgd · libgd4 Oca 2017
- CVE-2016-612832İzleyin
The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remo
YüksekCVSS 7,5İstismar yokEPSS %7libgd · libgd7 Ağu 2016
- CVE-2017-636232İzleyin
Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vect
YüksekCVSS 7,5İstismar yokEPSS %5libgd · libgd7 Eyl 2017
- CVE-2016-1016832İzleyin
Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vecto
YüksekCVSS 7,8İstismar yokEPSS %4libgd · libgd15 Mar 2017
- CVE-2017-636332İzleyin
In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c.
YüksekCVSS 8,1İstismar yokEPSS %1libgd · libgd27 Şub 2020
- CVE-2013-745631İzleyin
gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.
YüksekCVSS 7,6İstismar yokEPSS %4libgd · libgd7 Ağu 2016
- CVE-2015-887731İzleyin
The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, us
YüksekCVSS 7,5İstismar yokEPSS %4libgd · libgd21 May 2016
- CVE-2018-1455331İzleyin
gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specif
YüksekCVSS 7,5İstismar yokEPSS %3libgd · libgd11 Şub 2020
- CVE-2021-4014531İzleyin
gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free.
YüksekCVSS 7,5İstismar yokEPSS %2libgd · libgd25 Ağu 2021
- CVE-2016-620728İzleyin
Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote a
OrtaCVSS 6,5İstismar yokEPSS %6libgd · libgd12 Ağu 2016
- CVE-2016-613227İzleyin
The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of servic
OrtaCVSS 6,5İstismar yokEPSS %3libgd · libgd12 Ağu 2016
- CVE-2016-621427İzleyin
gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a
OrtaCVSS 6,5İstismar yokEPSS %3libgd · libgd12 Ağu 2016
- CVE-2016-616127İzleyin
The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-boun
OrtaCVSS 6,5İstismar yokEPSS %3libgd · libgd12 Ağu 2016