CVE-2016-10166

Critical

Published: 15/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An integer underflow in the _gdContributionsAlloc function in the GD Graphics Library (libgd) before version 2.2.4 allows remote attackers to have unspecified impact via manipulation of the u variable.

Risk Assessment

Attackers may exploit this vulnerability to carry out attacks that could lead to unforeseen consequences in applications using this library.

Recommendation

It is recommended to update the GD Graphics Library to version 2.2.4 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.