CVE-2016-6912: Double Free
Published Jan 26, 2017
·Updated
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
Affected Software
1 affected component
Libgd Libgd<=2.2.3
Remediation
Patch Available
Event History
Jan 26, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-6912?
CVE-2016-6912 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2016-6912?
To fix CVE-2016-6912, upgrade to libgd version 2.2.4 or later.
3
What causes the CVE-2016-6912 vulnerability?
CVE-2016-6912 is caused by a double free vulnerability in the gdImageWebPtr function due to improper handling of large width and height values.
4
Who is affected by CVE-2016-6912?
CVE-2016-6912 affects users of libgd versions prior to 2.2.4.
5
What are the potential impacts of CVE-2016-6912?
The potential impacts of CVE-2016-6912 include application crashes and possible remote code execution.