CVE-2016-10168

7.8 HIGH

Published: March 15, 2017 Modified: May 13, 2026

Description

Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://libgd.github.io/release-2.2.4.html

Source: security@debian.org

Vendor Advisory

http://www.debian.org/security/2017/dsa-3777

Source: security@debian.org

http://www.openwall.com/lists/oss-security/2017/01/26/1

Source: security@debian.org

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2017/01/28/6

Source: security@debian.org

Mailing List Patch Third Party Advisory

http://www.securityfocus.com/bid/95869

Source: security@debian.org

Third Party Advisory VDB Entry

http://www.securitytracker.com/id/1037659

Source: security@debian.org

https://access.redhat.com/errata/RHSA-2017:3221

Source: security@debian.org

https://access.redhat.com/errata/RHSA-2018:1296

Source: security@debian.org

https://github.com/libgd/libgd/commit/69d2fd2c597ffc0c217de1238b9bf4d4bceba8e6

Source: security@debian.org

Issue Tracking Patch Third Party Advisory

https://github.com/libgd/libgd/issues/354

Source: security@debian.org

Issue Tracking Patch Third Party Advisory

http://libgd.github.io/release-2.2.4.html