| Package | Affected versions | Patched versions |
|---|---|---|
| graphics draw library | = 2.0.33 |
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free