CVE-2016-5767

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-5767
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5767.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-5767
Downstream
ALPINE (1)
DEBIAN (1)
MGASA (1)
RHSA (2)
SUSE (3)
Related
SUSE (3)
Published
2016-08-07T10:59:14Z
Modified
2026-10-22T07:07:23Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "last_affected":  "2.0.33"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "libgd:libgd"
        },
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "2.0.34RC1"
                        }
                    ],
                    "source":  "DESCRIPTION"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d5747a70cf612e653b0e56dfa50efb29bbba273d
Introduced
fc1df8e7a6886e29a6ed5bef3f674ac61164e847
Fixed
961e562d1b7e7d67c7370022a167938641d607ea
Introduced
400e65e955f08ad6ae57c1a15be04d5852107252
Fixed
a36407215f69ba2debf77933dcb3faa0c3ba2d04
Fixed
c395c6e5d7e8df37a21265ff76e48fe75ceb5ae6
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "5.5.37"
                }
            ],
            "source":  "DESCRIPTION"
        },
        {
            "range":  [
                {
                    "introduced":  "5.6.x"
                },
                {
                    "fixed":  "5.6.23"
                }
            ],
            "source":  "DESCRIPTION"
        },
        {
            "range":  [
                {
                    "introduced":  "7.x"
                },
                {
                    "fixed":  "7.0.8"
                }
            ],
            "source":  "DESCRIPTION"
        },
        {
            "range":  [
                {
                    "fixed":  "c395c6e5d7e8df37a21265ff76e48fe75ceb5ae6"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

Other
POST_PHP7_NSAPI_REMOVAL
POST_PHP7_REMOVALS
PRE_PHP7_EREG_MYSQL_REMOVALS
PRE_PHP7_NSAPI_REMOVAL
PRE_PHP7_REMOVALS
php-5.*
php-5.6.23RC1
php-7.*
php-7.0.8RC1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5767.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "259753987416402141766353710983866908693",
            "length":  4802
        },
        "id":  "CVE-2016-5767-60a76a01",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/php/php-src/commit/961e562d1b7e7d67c7370022a167938641d607ea",
        "target":  {
            "file":  "ext/wddx/wddx.c",
            "function":  "php_wddx_push_element"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "56026588670328373046956429696843236929",
            "length":  1344
        },
        "id":  "CVE-2016-5767-6bd33d8a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/php/php-src/commit/c395c6e5d7e8df37a21265ff76e48fe75ceb5ae6",
        "target":  {
            "file":  "ext/gd/libgd/gd.c",
            "function":  "gdImageCreate"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "108112416631527217460140097544647415290",
                "19194827250221392632591492071396049436",
                "327693491351152557693361828737983469639",
                "213154144896593918768606924357591146913"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2016-5767-e0fbf8ee",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/php/php-src/commit/961e562d1b7e7d67c7370022a167938641d607ea",
        "target":  {
            "file":  "ext/wddx/wddx.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-22T07:07:23Z"