CVE-2016-6905

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://libgd.github.io/release-2.2.3.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/08/23/1Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/91743Third Party Advisory, VDB Entry
https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03Issue Tracking, Patch
https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186Issue Tracking, Patch
https://github.com/libgd/libgd/issues/248Issue Tracking, Patch
https://github.com/libgd/libgd/pull/251Issue Tracking, Patch
http://libgd.github.io/release-2.2.3.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/08/23/1Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/91743Third Party Advisory, VDB Entry
https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03Issue Tracking, Patch
https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186Issue Tracking, Patch
https://github.com/libgd/libgd/issues/248Issue Tracking, Patch
https://github.com/libgd/libgd/pull/251Issue Tracking, Patch

Timeline

Published: Oct 3, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-69065.5The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of ser CVE-2016-69086.1Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due CVE-2016-69099.8Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch befo CVE-2016-69105.5The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devic CVE-2016-69115.5The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-CVE-2016-69129.8Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have CVE-2016-69135.4Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web s CVE-2016-69147.8Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM CVE-2016-69157.8Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, a CVE-2016-69167.8Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield T CVE-2016-69177.8Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Ta CVE-2016-69189.8Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. (