CVE-2016-7568
CriticalSummary
Integer overflow in the gdImageWebpCtx function in the GD Graphics Library (libgd) through version 2.2.3, used in PHP through version 7.0.11, can lead to denial of service (heap-based buffer overflow) or other unspecified impacts via crafted imagewebp and imagedestroy calls.
Risk Assessment
Remote attackers may exploit this vulnerability to disrupt application functionality, potentially leading to service downtime and financial losses.
Recommendation
It is recommended to update the GD library to the latest version and monitor applications for suspicious calls related to image processing.
Original NVD description (English source)
Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted imagewebp and imagedestroy calls.