Vulnerabilities > Libgd > Libgd > 2.0.34

DATE CVE VULNERABILITY TITLE RISK
2016-05-22 CVE-2015-8877 Resource Management Errors vulnerability in multiple products
The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.
network
low complexity
libgd php CWE-399
5.0
2007-05-18 CVE-2007-2756 Denial of Service vulnerability in Libgd 2.0.34
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.
network
libgd
4.3