CVE-2018-14553

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call…

published February 11, 2020

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03435 · 88.9th percentile
Published
2020-02-11T00:00Z
EPSS history
Timeline
  • 11 FEB 00:00Z
    gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call…
    cvelistv5