CVE-2016-1903
CriticalSummary
The gdImageRotateInterpolated function in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service via a large bgd_color argument to the imagerotate function.
Risk Assessment
Attackers may exploit this vulnerability to gain access to sensitive data or cause application crashes, potentially leading to service downtime.
Recommendation
It is recommended to update PHP to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.