CVE-2016-6912

Critical

Published: 26/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (libgd) before version 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

Risk Assessment

Attackers may exploit this vulnerability to destabilize the system or execute unauthorized code, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to update the GD Graphics Library to version 2.2.4 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.