VDB

ALPINE-CVE-2016-10168

ALPINE-CVE-2016-10168 PUBLISHED CVSS 7.800000190734863 HIGH

Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.

Risk Scores

CVSS 3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.4gd0, 2.0.35-r0, 2.0.35-r1
Alpine:v3.5gd2.0.35-r0, 2.0.35-r2, 2.0.36_rc1-r2
Alpine:v3.3gd0, 2.0.35-r0, 2.0.35-r1

Timeline

  • Mar 15, 2017 CVE Published
  • Nov 19, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›