VDB
ALPINE-CVE-2016-6912
ALPINE-CVE-2016-6912
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
Risk Scores
CVSS 3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.4 | gd | 2.0.36_rc1-r3, 2.2.3-r1, 2.2.3-r0 |
| Alpine:v3.3 | gd | 2.1.1-r2, 0, 2.0.35-r0 |
| Alpine:v3.5 | gd | *, 2.2.3-r1, 2.1.1-r0 |
Timeline
- Jan 26, 2017 CVE Published
- Nov 19, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch