CVE-2016-6207

Description

Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

Weakness classification

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CWE-190: Integer Overflow or Wraparound
• CWE-787: Out-of-bounds Write

Primary references

• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Patch, Third Party Advisory, VDB Entry
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Issue Tracking, Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry