CVE-2019-6978

Name of the Vulnerable Software and Affected Versions The GD Graphics Library version 2.2.5

Description The issue is related to a double free error in the gdImage*Ptr() functions within the files gd gif out.c, gd jpeg.c, and gd wbmp.c of the graphic library. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For version 2.2.5, consider updating to a newer version that addresses the double free error in the gdImage*Ptr() functions to prevent potential exploitation. As a temporary workaround, consider restricting the use of the gdImage*Ptr() functions in gd gif out.c, gd jpeg.c, and gd wbmp.c until a patch is available.