CVE-2016-5116

Critical

Published: 07/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In the GD Graphics Library (libgd) before version 2.2.0, there is a vulnerability that allows attackers to obtain sensitive information from process memory or cause application crashes via a long name.

Risk Assessment

Organizations may be exposed to data leaks or application downtime, potentially leading to loss of user trust.

Recommendation

It is recommended to update the GD Graphics Library to version 2.2.0 or later to mitigate this vulnerability.

Original NVD description (English source)

gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.