Security Advisory
CVE-2015-8877
7.5
HIGH
Vulnerability Description
The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.
Published Date
May 22, 2016
Official Source
NIST NVD Advisory