[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_u571oK8scVjIPK5q49-U6R2WIw2crC9ZpUG2waoZGk":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":27,"kevVulnerabilities":87,"topProductsByCves":88,"seoMetadata":91,"meta":100},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":26},17625,"libgd",2,39,0,64,"2021-09-08","l",[16,20],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},103551,60,34,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},103550,"gd_graphics_library",4,5,"2009-10-19","Libgd is a technology vendor with 2 tracked products and 39 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[28,37,45,52,58,63,68,73,77,83],{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":35,"epssScore":36},"CVE-2019-6977","gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","2019-01-27",8.8,"v3.0","High",false,0.71496,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":35,"epssScore":44},"CVE-2016-3074","Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.","2016-04-26",9.8,"v3.1","Critical",0.37226,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":24,"cvssVersion":49,"severity":50,"isKev":35,"epssScore":51},"CVE-2014-9709","The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.","2015-03-30","v2","Medium",0.15425,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":49,"severity":50,"isKev":35,"epssScore":57},"CVE-2007-3473","The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.","2007-06-28",4.3,0.13311,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":41,"cvssVersion":33,"severity":43,"isKev":35,"epssScore":62},"CVE-2016-10166","Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.","2017-03-15",0.10687,{"cveId":64,"description":65,"publishedDate":25,"cvssScore":66,"cvssVersion":49,"severity":43,"isKev":35,"epssScore":67},"CVE-2009-3546","The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.",9.3,0.10247,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":35,"epssScore":72},"CVE-2016-5766","Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.","2016-08-07",0.07495,{"cveId":74,"description":75,"publishedDate":55,"cvssScore":56,"cvssVersion":49,"severity":50,"isKev":35,"epssScore":76},"CVE-2007-3472","Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.",0.07319,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":33,"severity":34,"isKev":35,"epssScore":82},"CVE-2016-9933","Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.","2017-01-04",7.5,0.06871,{"cveId":84,"description":85,"publishedDate":71,"cvssScore":81,"cvssVersion":42,"severity":34,"isKev":35,"epssScore":86},"CVE-2016-6128","The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.",0.06805,[],[89,90],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"Libgd - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Libgd covering 2 products with 39 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Libgd vulnerabilities, Libgd security, Libgd CVE, Libgd threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":96,"@type":97,"name":98,"description":93,"url":99},"https:\u002F\u002Fschema.org","Organization","Libgd","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flibgd",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":101,"apiVersion":102},"2026-10-17T16:27:39.456Z","3.0"]