VDB

RHSA-2026:80500

RHSA-2026:80500 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression and pixel manipulation generally destroy the exploit payload.

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red Hatgd-debuginfo-0:2.3.3-20.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-debugsource-0:2.3.3-20.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-debugsource-0:2.3.3-20.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-debugsource-0:2.3.3-20.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-progs-debuginfo-0:2.3.3-20.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-debuginfo-0:2.3.3-20.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-0:2.3.3-20.el10_0.1.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-progs-debuginfo-0:2.3.3-20.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-0:2.3.3-20.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-devel-0:2.3.3-20.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-0:2.3.3-20.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-progs-debuginfo-0:2.3.3-20.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-devel-0:2.3.3-20.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-devel-0:2.3.3-20.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-debugsource-0:2.3.3-20.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-debuginfo-0:2.3.3-20.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-0:2.3.3-20.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-progs-debuginfo-0:2.3.3-20.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-devel-0:2.3.3-20.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1
Red Hatgd-debuginfo-0:2.3.3-20.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:2.3.3-20.el10_0.1

…and 1 more

Timeline

  • Oct 12, 2026 CVE Published
  • Oct 19, 2026 CVE Updated
  • Oct 19, 2026 Distribution Patch
  • Oct 19, 2026 Distribution Patch
  • Oct 19, 2026 Security Advisory
  • Oct 19, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›