VDB
RHSA-2026:84580
RHSA-2026:84580
PUBLISHED
CVSS 8.100000381469727 HIGH
A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression and pixel manipulation generally destroy the exploit payload.
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | gd-debugsource-0:2.3.2-3.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-debuginfo-0:2.3.2-3.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-debugsource-0:2.3.2-3.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-debugsource-0:2.3.2-3.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-devel-0:2.3.2-3.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-devel-0:2.3.2-3.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-progs-debuginfo-0:2.3.2-3.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-0:2.3.2-3.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-0:2.3.2-3.el9_4.1.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-0:2.3.2-3.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-debuginfo-0:2.3.2-3.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-devel-0:2.3.2-3.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-devel-0:2.3.2-3.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-progs-debuginfo-0:2.3.2-3.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-progs-debuginfo-0:2.3.2-3.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-debugsource-0:2.3.2-3.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-debuginfo-0:2.3.2-3.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-progs-debuginfo-0:2.3.2-3.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-0:2.3.2-3.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
| Red Hat | gd-debuginfo-0:2.3.2-3.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 2.3.2-3.el9 |
…and 6 more
Timeline
- Oct 19, 2026 CVE Published
- Oct 19, 2026 CVE Updated
- Oct 19, 2026 Distribution Patch
- Oct 19, 2026 Distribution Patch
- Oct 19, 2026 Security Advisory
- Oct 19, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:84580 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2533111 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84580.json advisory
- https://access.redhat.com/security/cve/CVE-2026-9672 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-9672 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-9672 advisory
- https://github.com/php/php-src/commit/b590f0380fda26ed180874a0255f0be078434315 advisory