Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-3478

Fixed in a distro release EPSS 2%

Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors, possibly involving truetype font (TTF) support.

Published 2007-06-28 · CVE record · OSV

Products: gd_graphics_library gdlib

Distro releases

ReleasePackageFixed in
Debian 12libgd22.0.35.dfsg-1
Debian 13libgd22.0.35.dfsg-1
Debian 14libgd22.0.35.dfsg-1