CVE-2018-1000222

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution

published August 20, 2018

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04200 · 90.9th percentile
Published
2018-08-20T20:00Z
EPSS history
Timeline
  • 20 AUG 20:00Z
    Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution
    cvelistv5