VDB

RHSA-2026:81518

RHSA-2026:81518 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression and pixel manipulation generally destroy the exploit payload.

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red Hatgd-progs-debuginfo-0:2.3.3-20.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-debugsource-0:2.3.3-20.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-debuginfo-0:2.3.3-20.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-debuginfo-0:2.3.3-20.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-devel-0:2.3.3-20.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-progs-debuginfo-0:2.3.3-20.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-debugsource-0:2.3.3-20.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-progs-debuginfo-0:2.3.3-20.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-debugsource-0:2.3.3-20.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-debugsource-0:2.3.3-20.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-0:2.3.3-20.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-debuginfo-0:2.3.3-20.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-devel-0:2.3.3-20.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-0:2.3.3-20.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-debuginfo-0:2.3.3-20.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-0:2.3.3-20.el10_2.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-0:2.3.3-20.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-0:2.3.3-20.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-progs-debuginfo-0:2.3.3-20.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10
Red Hatgd-devel-0:2.3.3-20.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)2.3.3-20.el10

…and 1 more

Timeline

  • Oct 12, 2026 CVE Published
  • Oct 19, 2026 CVE Updated
  • Oct 19, 2026 Distribution Patch
  • Oct 19, 2026 Distribution Patch
  • Oct 19, 2026 Security Advisory
  • Oct 19, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›