https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:42:49.464628+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-31630 CVE-2022-31630 — OOB read due to insufficient input validation in imageloadfont() 2026-09-29T03:42:49.467146+00:00

Affected: PHP Group PHP

In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.