High severity7.5NVD Advisory· Published Aug 26, 2021· Updated Jun 17, 2026

CVE-2021-40145

Description

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.

Affected products

Libgd/Libgd2 versions
cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*range: <=2.3.2
- (no CPE)range: <=2.3.2
GD Graphics Library/GD Graphics Librarydescription
Libgd/GD Graphics Libraryllm-create
Range: <=2.3.2

Patches

Vulnerability mechanics

References

github.com/libgd/libgd/commit/c5fd25ce0e48fd5618a972ca9f5e28d6d62006afnvdPatchThird Party Advisory
github.com/libgd/libgd/issues/700nvdExploitIssue TrackingThird Party Advisory
github.com/libgd/libgd/pull/713nvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000