Servers and applications
CVE-2015-8877
The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.
- Severity
- High 7.5
- Published
- 22 May 2016
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 14 Oct 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
PHPServers and applications · cpe:a:php:php |
|