CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "12.04"
                },
                {
                    "last_affected": "12.04"
                },
                {
                    "introduced": "14.04"
                },
                {
                    "last_affected": "14.04"
                },
                {
                    "introduced": "15.10"
                },
                {
                    "last_affected": "15.10"
                },
                {
                    "introduced": "16.04"
                },
                {
                    "last_affected": "16.04"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "canonical:ubuntu_linux",
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                },
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "23"
                },
                {
                    "last_affected": "23"
                },
                {
                    "introduced": "24"
                },
                {
                    "last_affected": "24"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "fedoraproject:fedora",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "13.2"
                },
                {
                    "last_affected": "13.2"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "opensuse:opensuse",
            "cpes": [
                "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/libgd/libgd

Affected ranges

Type

GIT

Repo

https://github.com/libgd/libgd

Events

Introduced

2912c0a2e0a246318f41bf1997f34ce1dc3e5e42

Last affected

2912c0a2e0a246318f41bf1997f34ce1dc3e5e42

Fixed

2bb97f407c1145c850416a3bfbcc8cf124e68a19

Database specific

{
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:libgd:libgd:2.1.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.1.1"
        },
        {
            "last_affected": "2.1.1"
        }
    ]
}

Affected versions

2.*

2.1.1

gd-2.*

gd-2.1.1

Database specific

vanir_signatures_modified

"2026-07-08T12:41:24Z"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3074.json"

vanir_signatures

[
    {
        "id": "CVE-2016-3074-081b5b6d",
        "digest": {
            "function_hash": "163878100595225240009372061331328833043",
            "length": 2523.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/libgd/libgd/commit/2bb97f407c1145c850416a3bfbcc8cf124e68a19",
        "deprecated": false,
        "target": {
            "function": "_gd2GetHeader",
            "file": "src/gd_gd2.c"
        }
    },
    {
        "id": "CVE-2016-3074-8c2aa4db",
        "digest": {
            "line_hashes": [
                "308632048764262319325349404959904373833",
                "156654908032796698564829210861782091210",
                "87643980687445443250260216682085309841",
                "74748855092100787267051943652936968299"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/libgd/libgd/commit/2bb97f407c1145c850416a3bfbcc8cf124e68a19",
        "deprecated": false,
        "target": {
            "file": "src/gd_gd2.c"
        }
    }
]

Git / github.com/php/php-src

Affected ranges

Type

GIT

Repo

https://github.com/php/php-src

Events

Introduced

2c2d0de09e522fe097bfcebfb758171eb6aa5270

Fixed

9d10b0109258e8ea797c8977c5932d162d6c6004

Introduced

fc1df8e7a6886e29a6ed5bef3f674ac61164e847

Fixed

50a8b9527a2317ba861ad0b660ff981f69941cfd

Introduced

60fffd296abce5fc071f3c173c25a2696cf683c6

Fixed

734a5fca2c4731e34eca551f28be9a10ffc3f3c9

Database specific

{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.5.0"
        },
        {
            "fixed": "5.5.35"
        },
        {
            "introduced": "5.6.0"
        },
        {
            "fixed": "5.6.21"
        },
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.0.6"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3074.json"