CVE-2018-14553

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.htmlThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1599032Issue Tracking, Permissions Required
https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860fPatch, Third Party Advisory
https://github.com/libgd/libgd/pull/580Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00014.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/
https://usn.ubuntu.com/4316-1/Third Party Advisory
https://usn.ubuntu.com/4316-2/Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.htmlThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1599032Issue Tracking, Permissions Required
https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860fPatch, Third Party Advisory
https://github.com/libgd/libgd/pull/580Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00014.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/
https://usn.ubuntu.com/4316-1/Third Party Advisory
https://usn.ubuntu.com/4316-2/Third Party Advisory

Timeline

Published: Feb 11, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-145577.5An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318 CVE-2018-145589.8An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318 CVE-2018-145597.5An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318 CVE-2018-14567.1IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML da CVE-2018-145629.8An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in includ CVE-2018-145639.8An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner CVE-2018-145649.8An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::find_bases in include/cb_ngram_featu CVE-2018-145659.8An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::find_bases in CVE-2018-145676.5libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that trig CVE-2018-145687.5Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients pro CVE-2018-14579.8An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privile CVE-2018-145708.8A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote