Vulnerabilities > CVE-2021-40145 - Double Free vulnerability in Libgd

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

libgd

CWE-415

NVD

Published: 2021-08-26

Updated: 2024-11-21

Summary

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.

Vulnerable Configurations

Part	Description	Count
Application	Libgd Libgd Libgd 1.3.0 Libgd Libgd 1.4.0 Libgd Libgd 1.5.0 Libgd Libgd 1.6.0 Libgd Libgd 1.6.1 Libgd Libgd 1.6.2 Libgd Libgd 1.6.3 Libgd Libgd 1.7.0 Libgd Libgd 1.7.1 Libgd Libgd 1.7.2 Libgd Libgd 1.7.3 Libgd Libgd 1.8.0 Libgd Libgd 1.8.1 Libgd Libgd 1.8.3 Libgd Libgd 1.8.4 Libgd Libgd 2.0.0 Libgd Libgd 2.0.1 Libgd Libgd 2.0.2 Libgd Libgd 2.0.3 Libgd Libgd 2.0.4 Libgd Libgd 2.0.5 Libgd Libgd 2.0.6 Libgd Libgd 2.0.7 Libgd Libgd 2.0.8 Libgd Libgd 2.0.9 Libgd Libgd 2.0.10 Libgd Libgd 2.0.11 Libgd Libgd 2.0.12 Libgd Libgd 2.0.13 Libgd Libgd 2.0.14 Libgd Libgd 2.0.15 Libgd Libgd 2.0.17 Libgd Libgd 2.0.18 Libgd Libgd 2.0.19 Libgd Libgd 2.0.20 Libgd Libgd 2.0.21 Libgd Libgd 2.0.22 Libgd Libgd 2.0.23 Libgd Libgd 2.0.24 Libgd Libgd 2.0.25 Libgd Libgd 2.0.26 Libgd Libgd 2.0.27 Libgd Libgd 2.0.28 Libgd Libgd 2.0.29 Libgd Libgd 2.0.30 Libgd Libgd 2.0.31 Libgd Libgd 2.0.32 Libgd Libgd 2.0.33 Libgd Libgd 2.0.34 Libgd Libgd 2.1.0 Libgd Libgd 2.1.1 Libgd Libgd 2.2.0 Libgd Libgd 2.2.1 Libgd Libgd 2.2.2 Libgd Libgd 2.2.3 Libgd Libgd 2.2.4 Libgd Libgd 2.2.5 Libgd Libgd 2.3.0 Libgd Libgd 2.3.1 Libgd Libgd 2.3.2	64

Common Weakness Enumeration (CWE)

CWE-415 - Double Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References