{"id":"CVE-2021-40812","aliases":["AZL-6433","CLSA-2021-1635459219","CLSA-2023-1689009763","CLSA-2026-1779823719","DEBIAN-CVE-2021-40812","DLA-3781-1","DLA-4411-1","EUVD-2021-27976","GHSA-53w9-wg73-ghrw","JLSEC-2026-361","MGASA-2021-0449","OESA-2021-1353","SUSE-SU-2021:3214-1","SUSE-SU-2021:3236-1","UBUNTU-CVE-2021-40812","USN-7112-1","openSUSE-SU-2021:3236-1"],"status":"published","title":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack...","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01659,"percentile":0.76989,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2021-09-08T00:00:00Z","modified":"2026-10-26T09:30:02Z","fixes":[{"ecosystem":"Azure Linux:2","package":"gd","fixed_in":["2.3.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgd-dev","fixed_in":["2.2.5-4ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgd-tools","fixed_in":["2.2.5-4ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgd3","fixed_in":["2.2.5-4ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gd","fixed_in":["2.3.2-3.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gd-devel","fixed_in":["2.3.2-3.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gd-progs","fixed_in":["2.3.2-3.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libgd2","fixed_in":["2.3.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgd2","fixed_in":["2.3.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgd2","fixed_in":["2.3.3-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibGD_jll","fixed_in":["2.3.3+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libgd","fixed_in":["2.3.1-1.3.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gd","fixed_in":["2.3.0-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"gd","fixed_in":["2.3.0-3.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gd","fixed_in":["2.1.0-24.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gd","fixed_in":["2.1.0-24.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gd","fixed_in":["2.1.0-24.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gd","fixed_in":["2.1.0-24.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"gd","fixed_in":["2.2.5-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gd","fixed_in":["2.2.5-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"gd","fixed_in":["2.2.5-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"gd","fixed_in":["2.2.5-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"gd","fixed_in":["2.2.5-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"gd","fixed_in":["2.2.5-11.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libgd2","fixed_in":["2.1.1-4ubuntu0.16.04.12+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libgd2","fixed_in":["2.2.5-4ubuntu0.5+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libgd2","fixed_in":["2.2.5-5.2ubuntu2.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libgd2","fixed_in":["2.3.0-2ubuntu2.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"gd","fixed_in":["2.2.5-11.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libgd-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.13"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libgd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.13"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libgd3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.13"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgd-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgd3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-3.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-3.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gd-progs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-3.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-5.2+deb10u1"}]}],"versions":["2.2.5-5.2"],"bundled":3},{"source":"osv","ecosystem":"Debian:11","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb11u1"}]}],"versions":["2.3.0-2"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"LibGD_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.3.3+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libgd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1.3.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-3.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-11.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-2","2.1.0-3","2.1.0-3ubuntu0.1","2.1.0-3ubuntu0.2","2.1.0-3ubuntu0.3","2.1.0-3ubuntu0.5","2.1.0-3ubuntu0.6","2.1.0-3ubuntu0.7","2.1.0-3ubuntu0.8","2.1.0-3ubuntu0.10","2.1.0-3ubuntu0.11","2.1.0-3ubuntu0.11+esm1","2.1.0-3ubuntu0.11+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.12+esm4"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1","2.1.1-4ubuntu0.16.04.2","2.1.1-4ubuntu0.16.04.3","2.1.1-4ubuntu0.16.04.5","2.1.1-4ubuntu0.16.04.6","2.1.1-4ubuntu0.16.04.7","2.1.1-4ubuntu0.16.04.8","2.1.1-4ubuntu0.16.04.10","2.1.1-4ubuntu0.16.04.11","2.1.1-4ubuntu0.16.04.12","2.1.1-4ubuntu0.16.04.12+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.5+esm3"}]}],"versions":["2.2.5-3","2.2.5-4","2.2.5-4ubuntu0.2","2.2.5-4ubuntu0.3","2.2.5-4ubuntu0.4","2.2.5-4ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-5.2ubuntu2.4"}]}],"versions":["2.2.5-5.2","2.2.5-5.2ubuntu2","2.2.5-5.2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2ubuntu2.3"}]}],"versions":["2.3.0-2ubuntu1","2.3.0-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.12+esm4"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1","2.1.1-4ubuntu0.16.04.2","2.1.1-4ubuntu0.16.04.3","2.1.1-4ubuntu0.16.04.5","2.1.1-4ubuntu0.16.04.6","2.1.1-4ubuntu0.16.04.7","2.1.1-4ubuntu0.16.04.8","2.1.1-4ubuntu0.16.04.10","2.1.1-4ubuntu0.16.04.11","2.1.1-4ubuntu0.16.04.12","2.1.1-4ubuntu0.16.04.12+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.5+esm3"}]}],"versions":["2.2.5-3","2.2.5-4","2.2.5-4ubuntu0.2","2.2.5-4ubuntu0.3","2.2.5-4ubuntu0.4","2.2.5-4ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-5.2ubuntu2.4"}]}],"versions":["2.2.5-5.2","2.2.5-5.2ubuntu2","2.2.5-5.2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2ubuntu2.3"}]}],"versions":["2.3.0-2ubuntu1","2.3.0-2ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-11.3.1"}]}]}],"products":[{"vendor":"libgd","product":"libgd"}],"references":[{"url":"https://github.com/libgd/libgd/commit/6f5136821be86e7068fcdf651ae9420b5d42e9a9","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/libgd/libgd/issues/750#issuecomment-914872385","tags":["x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40812","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-53w9-wg73-ghrw"},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1635459219","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1689009763","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779823719.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-40812","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0449.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29486","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FCVD7RYV2TSOLINPDAIY7P7Q4OSCOREN/","tags":["web","advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1353","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213214-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190400","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40812","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213236-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-40812","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-40812","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7112-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-40812","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2021-09-08T00:00:00Z","modified":"2024-10-29T13:45:44.111Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:33:01.495293Z"}],"euvd":[{"id":"EUVD-2021-27976","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2021-09-08T00:00:00Z","modified":"2024-10-29T13:45:44Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:05:15.24326Z"}],"ghsa":[{"id":"GHSA-53w9-wg73-ghrw","title":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack...","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2022-05-24T19:13:18Z","modified":"2024-04-07T03:30:46Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:57:03.777371Z"}],"nvd":[{"id":"CVE-2021-40812","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2021-09-08T21:15:14.083Z","modified":"2026-06-17T04:07:28.177Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:06:58.502206Z"}],"osv":[{"id":"AZL-6433","title":"CVE-2021-40812 affecting package gd for versions less than 2.3.3-1","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2021-09-08T21:15:14Z","modified":"2026-04-21T04:32:22.198941Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"CVE-2021-40812","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2021-09-08T21:15:14.083Z","modified":"2026-10-20T10:54:56.473865542Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-40812","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2021-09-08T21:15:14.083Z","modified":"2026-10-23T18:03:33.979966051Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"JLSEC-2026-361","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2026-04-30T11:53:44.984Z","modified":"2026-07-18T00:00:43.627478976Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2021-1353","title":"gd security update","description":"The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. The most common applications of GD involve website development, although it can be used with any standalone application!\r\n\r\nSecurity Fix(es):\r\n\r\nThe GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.(CVE-2021-40812)","status":"published","published":"2021-09-30T11:04:37Z","modified":"2026-08-18T01:15:58.485304041Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-40812","description":"The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.","status":"published","published":"2021-09-08T21:15:00Z","modified":"2026-04-22T13:02:17.266968Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"CLSA-2021-1635459219","title":"Fix CVE(s): CVE-2021-40812, CVE-2021-40145, CVE-2021-38115, CVE-2017-6363","description":"\n   * SECURITY UPDATE: unhandled memory allocation error in gdImageGd2Ptr\n     - debian/patches/CVE-2021-40145.patch: check for non-zero return\n       code from _gdImageGd2\n     - CVE-2021-40145\n   * SECURITY UPDATE: unhandled value returned from gdPutBuf\n     - debian/patches/CVE-2021-40812.patch: handle possible gdPutBuf\n       error in _gdImageBmpCtx and _gdImageWebpCtx\n       CVE-2021-40812\n   * SECURITY UPDATE: unhandled value returned from gdGetBuf\n     - debian/patches/CVE-2021-38115.patch: handle possible gdGetBuf\n       error in read_header_tga\n       CVE-2021-38115\n   * SECURITY UPDATE: handle possible heap buffer overread\n     - debian/patches/CVE-2017-6363.patch: make sure transparent\n       index is within bounds of the palette\n       CVE-2017-6363","status":"published","published":"2021-10-28T22:13:39Z","modified":"2026-06-04T10:03:25.925809666Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2023-1689009763","title":"Fix CVE(s): CVE-2021-40812","description":"\n   * SECURITY UPDATE: Out of bounds read due to a lack of return value checks\n     - debian/patches/CVE-2021-40812.patch: Added return value checks following\n       calls to gdPutBuf in src/gd_webp.c and src/gd_bmp.c\n     - CVE-2021-40812","status":"published","published":"2023-07-10T17:22:48Z","modified":"2026-06-04T10:04:24.513627Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2026-1779823719","title":"gd: Fix of CVE-2021-40812","description":"- CVE-2021-40812: out-of-bounds read in BMP/WebP output due to unchecked gdPutBuf return values","status":"published","published":"2026-05-26T19:28:43Z","modified":"2026-10-26T09:30:02.908233845Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"DLA-3781-1","title":"libgd2 - security update","status":"published","published":"2024-04-07T00:00:00Z","modified":"2026-03-09T01:23:28.194643Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4411-1","title":"libgd2 - security update","status":"published","published":"2025-12-16T00:00:00Z","modified":"2025-12-16T08:44:58.453734Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2021-0449","title":"Updated libgd packages fix security vulnerability","description":"The updated packages fix a security vulnerability:\n\nThe GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds\nread because of the lack of certain gdGetBuf and gdPutBuf return value\nchecks (CVE-2021-40812).\n","status":"published","published":"2021-09-29T17:22:22Z","modified":"2026-04-16T04:41:43.659627763Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:3236-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\n- CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).\n","status":"published","published":"2021-09-27T14:37:43Z","modified":"2026-02-04T04:29:09.409956Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:3214-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\n- CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).\n","status":"published","published":"2021-09-23T14:25:00Z","modified":"2026-02-04T03:47:20.129087Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3236-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\n- CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).\n","status":"published","published":"2021-09-27T14:37:42Z","modified":"2026-02-04T03:02:29.0623Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-7112-1","title":"libgd2 vulnerability","description":"It was discovered that the GD Graphics Library did not perform proper\nbounds checking while handling BMP and WebP files. If a user were tricked\ninto opening a specially crafted file, an attacker could possibly use\nthis issue to cause a denial of service (application crash).\n\n","status":"published","published":"2024-11-15T01:44:40Z","modified":"2026-06-25T13:32:30.038031872Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}