https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:25:48.344067+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4659 ALSA-2020:4659 — Moderate: gd security update 2026-10-02T16:25:48.353134+00:00

Affected: AlmaLinux:8: gd, AlmaLinux:8: gd-devel

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats.

Security Fix(es):

* gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)

* gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)

* gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05698 bdu:2022-05698 2026-10-02T16:25:48.353199+00:00 bdu:2022-05698 https://cve.radiocsirt.org/vuln/bell-cve-2018-14553 Withdrawn: BELL-CVE-2018-14553 — CVE-2018-14553 does not affect BellSoft software 2026-10-02T16:25:48.353215+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/euvd-2026-67094 EUVD-2026-67094 2026-10-02T16:25:48.353230+00:00 EUVD-2026-67094 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14553 fkie_cve-2018-14553 2026-10-02T16:25:48.353241+00:00

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

 https://cve.radiocsirt.org/vuln/ghsa-jw3x-9g83-4hvr GHSA-jw3x-9g83-4hvr 2026-10-02T16:25:48.353261+00:00

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing atteckers to crash an application via a specific function call sequence.

 https://cve.radiocsirt.org/vuln/gsd-2018-14553 gsd-2018-14553 2026-10-02T16:25:48.353274+00:00 gsd-2018-14553 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0332-1 openSUSE-SU-2020:0332-1 — Security update for gd 2026-10-02T16:25:48.353292+00:00

Security update for gd

 https://cve.radiocsirt.org/vuln/suse-su-2020:0594-1 SUSE-SU-2020:0594-1 — Security update for gd 2026-10-02T16:25:48.353308+00:00

Security update for gd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14553 UBUNTU-CVE-2018-14553 2026-10-02T16:25:48.353322+00:00

Affected: Ubuntu:Pro:14.04:LTS: libgd2, Ubuntu:16.04:LTS: libgd2, Ubuntu:18.04:LTS: libgd2, Ubuntu:20.04:LTS: doxygen, Ubuntu:22.04:LTS: doxygen, Ubuntu:24.04:LTS: doxygen, Ubuntu:25.10: doxygen, Ubuntu:26.04:LTS: doxygen

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).