GHSA-gq8p-8q2h-mv7w

GHSA-gq8p-8q2h-mv7w PUBLISHED CVSS 6.5 MEDIUM

Record from GitHub Advisory Database · Published May 14, 2022

The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.

Risk scores

CVSS 3.0

6.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Timeline

May 14, 2022 CVE Published
Apr 9, 2026 Distribution Patch (2 in total, the first dated here)
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-gq8p-8q2h-mv7w
vulnetix vdb fixes GHSA-gq8p-8q2h-mv7w

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-gq8p-8q2h-mv7w/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2016-6161 advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html url
http://www.openwall.com/lists/oss-security/2016/07/05/7 url
http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html url
http://www.openwall.com/lists/oss-security/2016/07/05/6 url
http://www.ubuntu.com/usn/USN-3030-1 url
https://github.com/libgd/libgd/issues/209 url
http://www.debian.org/security/2016/dsa-3619 url

Look up in the Resolve Platform →