VULNERABILITY INTELLIGENCE
CVE-2013-7226
CVSS score6.8 MEDIUM
EPSS probability6.73%
CISA KEVNot currently listed
Published2014-02-18
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a heap-based buffer overflow.