tocsin

Alpine/gd: high 8.8

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted J

Action: Upgrade gd to 2.2.5-r1 or later.

Affected

introducedfixedlast affected
02.2.5-r1-

Fixed versions

2.2.5-r1

Sources

published · modified · JSON