https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:02:00 +0000 https://cve.radiocsirt.org/vuln/cve-2018-5711 <p>gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.</p> <p>gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.</p> https://cve.radiocsirt.org/vuln/cve-2018-5711 https://cve.radiocsirt.org/vuln/usn-3755-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgd2, Ubuntu:16.04:LTS: libgd2, Ubuntu:18.04:LTS: libgd2</p> <p>It was discovered that GD incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-1000222)</p> <p>It was discovered that GD incorrectly handled certain GIF files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-5711)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgd2, Ubuntu:16.04:LTS: libgd2, Ubuntu:18.04:LTS: libgd2</p> <p>It was discovered that GD incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-1000222)</p> <p>It was discovered that GD incorrectly handled certain GIF files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-5711)</p> https://cve.radiocsirt.org/vuln/usn-3755-1