CVE-2017-6363

CVE-2017-6363

In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion this issue should not have a CVE, since the GD and GD2 formats are documented to be 'obsolete, and should only be used for development and testing purposes.'

CVE-2017-6363

In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap- ...

GHSA-pfv9-ff57-j64p

** DISPUTED ** In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion this issue should not have a CVE, since the GD and GD2 formats are documented to be 'obsolete, and should only be used for development and testing purposes.'"

BDU:2022-05697

Уязвимость функции tiffWriter компонента gd_tiff.c графической библиотеки LibGD, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании