Vulnetix
Try Vulnetix Request Demo
CVE-2019-6977 PUBLISHED

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.

EPSS 86.30% · 99.4th percentile

Risk Scores

EPSS Score
86.30%
99.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibgd20, 2.1.1-4ubuntu0.16.04.10, 2.1.1-4ubuntu0.16.04.8
Ubuntu:18.04:LTSlibgd22.2.5-4ubuntu0.2, 0, 2.2.5-3
Ubuntu:14.04:LTSlibgd22.1.0-3ubuntu0.6, 2.1.0-3ubuntu0.5, 2.1.0-3ubuntu0.3

Timeline

References

Open in Interactive Console →