Vulnetix
Try Vulnetix Request Demo
CVE-2018-14553 PUBLISHED

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

EPSS 0.98% · 76.6th percentile

Risk Scores

EPSS Score
0.98%
76.6th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlibgd20, 2.2.5-4ubuntu0.3, 2.2.5-4ubuntu0.2
Ubuntu:25.10doxygen0, 1.9.8+ds-2.1build1
Ubuntu:Pro:14.04:LTSlibgd22.1.0-3ubuntu0.6, 2.1.0-3ubuntu0.7, 2.1.0-3ubuntu0.8
Ubuntu:24.04:LTSdoxygen1.9.4-4, 0, 1.9.8+ds-2
Ubuntu:20.04:LTSdoxygen1.8.17-0ubuntu1, 1.8.16-2, 1.8.16-2build1
Ubuntu:22.04:LTSdoxygen0, 1.9.1-2ubuntu1, 1.9.1-2ubuntu2
Ubuntu:16.04:LTSlibgd22.1.1-4ubuntu0.16.04.6, 2.1.1-4ubuntu0.16.04.3, 2.1.1-4ubuntu0.16.04.2

Timeline

References

Open in Interactive Console →