PatchTheCVE: gd graphics libraryhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2009-3546: The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, dohttps://patchthecve.com/cve/CVE-2009-3546.htmlhttps://patchthecve.com/cve/CVE-2009-3546.htmlTue, 16 Jun 2026 23:11:49 +0000HIGH 9.3: The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vuCVE-2007-3477: The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackershttps://patchthecve.com/cve/CVE-2007-3477.htmlhttps://patchthecve.com/cve/CVE-2007-3477.htmlTue, 16 Jun 2026 22:42:07 +0000MEDIUM 5.0: The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.CVE-2007-3474: Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have uhttps://patchthecve.com/cve/CVE-2007-3474.htmlhttps://patchthecve.com/cve/CVE-2007-3474.htmlTue, 16 Jun 2026 22:42:06 +0000LOW 2.6: Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors.CVE-2007-3473: The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote atthttps://patchthecve.com/cve/CVE-2007-3473.htmlhttps://patchthecve.com/cve/CVE-2007-3473.htmlTue, 16 Jun 2026 22:42:06 +0000MEDIUM 4.3: The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.CVE-2007-3472: Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows ushttps://patchthecve.com/cve/CVE-2007-3472.htmlhttps://patchthecve.com/cve/CVE-2007-3472.htmlTue, 16 Jun 2026 22:42:06 +0000MEDIUM 4.3: Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.CVE-2007-0455: Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows rhttps://patchthecve.com/cve/CVE-2007-0455.htmlhttps://patchthecve.com/cve/CVE-2007-0455.htmlTue, 16 Jun 2026 22:35:36 +0000HIGH 7.5: Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.