CVE-2016-10168

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://libgd.github.io/release-2.2.4.htmlVendor Advisory
http://www.debian.org/security/2017/dsa-3777
http://www.openwall.com/lists/oss-security/2017/01/26/1Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/28/6Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95869Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037659
https://access.redhat.com/errata/RHSA-2017:3221
https://access.redhat.com/errata/RHSA-2018:1296
https://github.com/libgd/libgd/commit/69d2fd2c597ffc0c217de1238b9bf4d4bceba8e6Issue Tracking, Patch, Third Party Advisory
https://github.com/libgd/libgd/issues/354Issue Tracking, Patch, Third Party Advisory
http://libgd.github.io/release-2.2.4.htmlVendor Advisory
http://www.debian.org/security/2017/dsa-3777
http://www.openwall.com/lists/oss-security/2017/01/26/1Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/28/6Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95869Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037659
https://access.redhat.com/errata/RHSA-2017:3221
https://access.redhat.com/errata/RHSA-2018:1296
https://github.com/libgd/libgd/commit/69d2fd2c597ffc0c217de1238b9bf4d4bceba8e6Issue Tracking, Patch, Third Party Advisory
https://github.com/libgd/libgd/issues/354Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Mar 15, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-101695.5The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via CVE-2016-10178.8Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 CVE-2016-101705.5The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read)CVE-2016-101715.5The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bound CVE-2016-101725.5The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bound CVE-2016-101737.5Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to CVE-2016-101749.8The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. CVE-2016-101759.8The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allo CVE-2016-101769.8The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the dev CVE-2016-101779.8An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin CVE-2016-101789.8An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command.CVE-2016-101797.5An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607.