CVE-2021-40812

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. The most common applications of GD involve website development, although it can be used with any standalone application!

Security Fix(es):

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.(CVE-2021-40812)

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.

• SECURITY UPDATE: unhandled memory allocation error in gdImageGd2Ptr
  • debian/patches/CVE-2021-40145.patch: check for non-zero return code from _gdImageGd2
  • CVE-2021-40145
• SECURITY UPDATE: unhandled value returned from gdPutBuf
  • debian/patches/CVE-2021-40812.patch: handle possible gdPutBuf error in _gdImageBmpCtx and _gdImageWebpCtx CVE-2021-40812
• SECURITY UPDATE: unhandled value returned from gdGetBuf
  • debian/patches/CVE-2021-38115.patch: handle possible gdGetBuf error in read_header_tga CVE-2021-38115
• SECURITY UPDATE: handle possible heap buffer overread
  • debian/patches/CVE-2017-6363.patch: make sure transparent index is within bounds of the palette CVE-2017-6363

• SECURITY UPDATE: Out of bounds read due to a lack of return value checks
  • debian/patches/CVE-2021-40812.patch: Added return value checks following calls to gdPutBuf in src/gd_webp.c and src/gd_bmp.c
  • CVE-2021-40812

• CVE-2021-40812: out-of-bounds read in BMP/WebP output due to unchecked gdPutBuf return values

The updated packages fix a security vulnerability:

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks (CVE-2021-40812).

This update for gd fixes the following issues:

• CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).

This update for gd fixes the following issues:

• CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).

This update for gd fixes the following issues:

• CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).

It was discovered that the GD Graphics Library did not perform proper bounds checking while handling BMP and WebP files. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service (application crash).