{"action":"Upgrade libgd2 to 2.3.3-1 or later.","affected":[{"fixed":"2.3.3-1","introduced":"0"}],"component":"libgd2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.3.3-1"],"id":"tcs_01M5NFZHSWC5QCDXV9W7ZY5CTH","modified_at":"2026-10-23T18:03:33.979966051Z","published_at":"2021-09-08T21:15:14.083Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-40812","https://security-tracker.debian.org/tracker/CVE-2021-40812"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-40812#Debian:14/libgd2","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-40812"}],"summary":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks."}