CVE-2016-6912

9.8 criticalEPSS 4.5%

Critical (9.8) in libgd libgd. EPSS 4.5% chance of exploitation in the next 30 days.

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-415
Published: 2017-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

libgd:libgd

References

http://www.debian.org/security/2017/dsa-3777
http://www.securityfocus.com/bid/95843
https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md
https://github.com/libgd/libgd/commit/a49feeae76d41959d85ee733925a4cf40bac61b2
http://www.debian.org/security/2017/dsa-3777

Check your stack JSON