Most recent entries from all

BELL-CVE-2026-11526

Affected: Alpaquita:23: perl-gd, Alpaquita:25: perl-gd, Alpaquita:stream: perl-gd

EUVD-2026-328820

fkie_cve-2026-11526

GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle.

GD::Image::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename that begins or ends with a pipe ("| cmd", "cmd |") or begins with a redirect ("> path", ">> path") is run as a command or redirect rather than opened as a file. _make_filehandle is the single open path behind every filename-accepting constructor (new, newFromPng, newFromJpeg, and the rest); the in-memory *Data variants do not open a path and are unaffected.

Any caller that forwards untrusted input to one of these constructors as a pathname can run an arbitrary command or truncate a file under the process UID.

GHSA-hx22-9fx3-xg77

GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle.

Any caller that forwards untrusted input to one of these constructors as a pathname can run an arbitrary command or truncate a file under the process UID.

msrc_CVE-2026-11526 — GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments…

msrc_CVE-2026-11526

OESA-2026-2789 — perl-GD security update

Affected: openEuler:24.03-LTS-SP3: perl-GD, openEuler:20.03-LTS-SP4: perl-GD, openEuler:22.03-LTS-SP4: perl-GD, openEuler:24.03-LTS-SP1: perl-GD

This is a autoloadable interface module for libgd, a popular library for creating and manipulating PNG files. With this library you can create PNG images on the fly or modify existing files. Features include: Security Fix(es):

GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle.

Any caller that forwards untrusted input to one of these constructors as a pathname can run an arbitrary command or truncate a file under the process UID.(CVE-2026-11526)

openSUSE-SU-2026:11017-1 — perl-GD-2.860.0-1.1 on GA media

perl-GD-2.860.0-1.1 on GA media

RHSA-2026:49758 — Red Hat Security Advisory: perl-GD security update

perl-GD: perl-GD: Arbitrary command execution and file overwrite via crafted filenames

UBUNTU-CVE-2026-11526

Affected: Ubuntu:16.04:LTS: libgd-perl, Ubuntu:18.04:LTS: libgd-perl, Ubuntu:20.04:LTS: libgd-perl, Ubuntu:22.04:LTS: libgd-perl, Ubuntu:24.04:LTS: libgd-perl, Ubuntu:25.10: libgd-perl, Ubuntu:26.04:LTS: libgd-perl

GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle. GD::Image::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename that begins or ends with a pipe ("| cmd", "cmd |") or begins with a redirect ("> path", ">> path") is run as a command or redirect rather than opened as a file. _make_filehandle is the single open path behind every filename-accepting constructor (new, newFromPng, newFromJpeg, and the rest); the in-memory *Data variants do not open a path and are unaffected. Any caller that forwards untrusted input to one of these constructors as a pathname can run an arbitrary command or truncate a file under the process UID.

WID-SEC-W-2026-2630 — Red Hat Enterprise Linux (DBI, perl-GD): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.