CVE-2016-7568: Buffer Overflow
Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted imagewebp and imagedestroy calls.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7568?
CVE-2016-7568 has a severity rating that may result in denial of service and potentially other unspecified impacts.
How do I fix CVE-2016-7568?
To fix CVE-2016-7568, update to GD Graphics Library version 2.2.4 or later, or PHP version 5.6.27, 7.0.12, or higher.
What types of software are affected by CVE-2016-7568?
CVE-2016-7568 affects GD Graphics Library versions up to 2.2.3 and specific PHP versions between 5.6.0 to 5.6.26 and 7.0.0 to 7.0.11.
Can CVE-2016-7568 be exploited remotely?
Yes, CVE-2016-7568 can be exploited remotely by attackers through specially crafted webp images.
What impact can CVE-2016-7568 have on systems?
The impact of CVE-2016-7568 can include a heap-based buffer overflow, leading to potential denial of service.