CVE-2016-7127
CriticalSummary
The imagegammacorrect function in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which can lead to denial of service (out-of-bounds write) or other unspecified impacts.
Risk Assessment
Remote attackers may exploit this vulnerability to disrupt application functionality, potentially causing service outages.
Recommendation
It is recommended to upgrade PHP to version 5.6.25 or 7.0.10 and monitor applications for unauthorized activities.
Original NVD description (English source)
The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.