← All advisories

Medium severity6.5NVD Advisory· Published Sep 8, 2021· Updated Jun 17, 2026

CVE-2021-40812

CVE-2021-40812

Description

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13

LibGD/LibGDdescription
Libgd/Libgdllm-fuzzy
Range: <=2.3.2
osv-coords11 versions
pkg:rpm/opensuse/gd&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP2 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP3 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/gd&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5
< 2.2.5-11.3.1+ 10 more
- (no CPE)range: < 2.2.5-11.3.1
- (no CPE)range: < 2.2.5-11.3.1
- (no CPE)range: < 2.2.5-11.3.1
- (no CPE)range: < 2.2.5-11.3.1
- (no CPE)range: < 2.2.5-11.3.1
- (no CPE)range: < 2.2.5-11.3.1
- (no CPE)range: < 2.2.5-11.3.1
- (no CPE)range: < 2.1.0-24.20.1
- (no CPE)range: < 2.1.0-24.20.1
- (no CPE)range: < 2.1.0-24.20.1
- (no CPE)range: < 2.1.0-24.20.1

Patches

Vulnerability mechanics

References

3

github.com/libgd/libgd/commit/6f5136821be86e7068fcdf651ae9420b5d42e9a9nvdPatchThird Party Advisory
github.com/libgd/libgd/issues/750nvdPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2024/04/msg00003.htmlnvd

News mentions

0

No linked articles in our index yet.