RHSA-2026:85099 | Vulnetix

RHSA-2026:85099 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression and pixel manipulation generally destroy the exploit payload.

Risk Scores

CVSS 3.1

8.100000381469727

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Red Hat	gd-progs-debuginfo-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-0:2.2.5-7.el8_6.1.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-progs-debuginfo-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-0:2.2.5-7.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-debugsource-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-debugsource-0:2.2.5-7.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-debugsource-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-devel-0:2.2.5-7.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-0:2.2.5-7.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-progs-debuginfo-0:2.2.5-7.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-debuginfo-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-debugsource-0:2.2.5-7.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-debuginfo-0:2.2.5-7.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-progs-debuginfo-0:2.2.5-7.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-0:2.2.5-7.el8_6.1.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-devel-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-devel-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)	0:2.2.5-7.el8_6.1
Red Hat	gd-debuginfo-0:2.2.5-7.el8_6.1.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)	0:2.2.5-7.el8_6.1

…and 2 more

Timeline

Oct 19, 2026 CVE Published
Oct 19, 2026 CVE Updated
Oct 19, 2026 Distribution Patch
Oct 19, 2026 Distribution Patch
Oct 19, 2026 Security Advisory
Oct 19, 2026 Security Advisory

References

Open in Interactive Console →