CVE-2018-15878
The GD Graphics Library (aka libgd) through 2.2.5 has a Double Free Vulnerability in the...
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2018-15878- Updated
- 2026-11-02
EUVDEUVD-2018-7735 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
EUVD-2018-7735- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q9hh-8fv3-cj97 No score
The GD Graphics Library (aka libgd) through 2.2.5 has a Double Free Vulnerability in the...
The GD Graphics Library (aka libgd) through 2.2.5 has a Double Free Vulnerability in the gdImageBmpPtr function.
- Record
GHSA-q9hh-8fv3-cj97- Updated
- 2026-11-02
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2018-15878- Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-15878 No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
UBUNTU-CVE-2018-15878- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libgd2Ubuntu:14.04:LTS |
before 2.1.0-3ubuntu0.10, plus listed versions 2.1.0-22.1.0-32.1.0-3ubuntu0.12.1.0-3ubuntu0.22.1.0-3ubuntu0.3 Show 4 moreShow less2.1.0-3ubuntu0.52.1.0-3ubuntu0.62.1.0-3ubuntu0.72.1.0-3ubuntu0.8 |
2.1.0-3ubuntu0.10 |
libgd2Ubuntu:16.04:LTS |
before 2.1.1-4ubuntu0.16.04.10, plus listed versions 2.1.1-4build12.1.1-4build22.1.1-4ubuntu0.16.04.12.1.1-4ubuntu0.16.04.22.1.1-4ubuntu0.16.04.3 Show 4 moreShow less2.1.1-4ubuntu0.16.04.52.1.1-4ubuntu0.16.04.62.1.1-4ubuntu0.16.04.72.1.1-4ubuntu0.16.04.8 |
2.1.1-4ubuntu0.16.04.10 |
libgd2Ubuntu:18.04:LTS |
before 2.2.5-4ubuntu0.2, plus listed versions 2.2.5-32.2.5-4 |
2.2.5-4ubuntu0.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-15878 has been rejected by its source and should not be treated as a live vulnerability, published June 20, 2019. Fixed in libgd2 2.1.0-3ubuntu0.10.