https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T11:00:47.157642+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-7890 CVE-2017-7890 2026-09-29T11:00:47.177907+00:00

The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.

 https://vulnerability.circl.lu/vuln/usn-3389-1 USN-3389-1 — libgd2 vulnerability 2026-09-29T11:00:47.178001+00:00

Affected: Ubuntu:14.04:LTS: libgd2, Ubuntu:16.04:LTS: libgd2

A vulnerability was discovered in GD Graphics Library (aka libgd), as used in PHP that does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read bytes from the top of the stack.