CVE-2016-7127: Critical severity php vulnerability
The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.
Other sources
Fixed bug (imagegammacorrect allows arbitrary write access). (CVE-2016-7127)
— PHP
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7127?
CVE-2016-7127 has a medium severity rating due to its potential to cause a denial of service through out-of-bounds writes.
How do I fix CVE-2016-7127?
To resolve CVE-2016-7127, upgrade your PHP version to at least 5.6.25 or 7.0.10.
Which versions of PHP are affected by CVE-2016-7127?
CVE-2016-7127 affects PHP versions prior to 5.6.25 and 7.x before 7.0.10.
What impact does CVE-2016-7127 have on my system?
CVE-2016-7127 can lead to denial of service due to improper handling of gamma values in image processing.
Is CVE-2016-7127 a code execution vulnerability?
No, CVE-2016-7127 primarily results in denial of service and does not allow for arbitrary code execution.