CVE-2016-5116

gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.

Score
CVSS 3.0 9.1 Critical
Status
Modified - cve@mitre.org
Published
2016-08-07
Last modified
2024-08-06
Weaknesses
CWE-119

Affected products

References

 
 
© AVABIS GmbH privacypolicy about