PT-2021-8088 · Unknown+5 · Gd Graphics Library+5

Meweez · Published 2021-09-05 · Updated 2025-12-16 · CVE-2021-40812

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The GD Graphics Library (aka LibGD) versions 2.3.2 and earlier

Description The issue is related to an out-of-bounds read in the GD Graphics Library due to the lack of certain return value checks for gdGetBuf and gdPutBuf. This can potentially allow a remote attacker to cause a denial of service.

Recommendations For versions 2.3.2 and earlier, consider applying patches or updates that include proper return value checks for gdGetBuf and gdPutBuf to prevent out-of-bounds reads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

AZL-6433

BDU:2024-06956

CVE-2021-40812

DLA-3781-1

DLA-4411-1

MGASA-2021-0449

OESA-2021-1353

OPENSUSE-SU-2021:3236-1

OPENSUSE-SU-2021_3236-1

SUSE-SU-2021:3214-1

SUSE-SU-2021:3236-1

SUSE-SU-2021_3214-1

SUSE-SU-2021_3236-1

USN-7112-1

Affected Products

Astra Linux

Debian

Gd Graphics Library

Linuxmint

Suse

Ubuntu

References · 34

• https://github.com/libgd/libgd/commit/6f5136821be86e7068fcdf651ae9420b5d42e9a9 · Patch
• https://github.com/libgd/libgd/issues/750#issuecomment-914872385 · Patch
• https://osv.dev/vulnerability/USN-7112-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40812 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-40812 · Security Note
• https://ubuntu.com/security/CVE-2021-40812 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-40812 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3214-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3236-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3781-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-40812 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3236-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40812 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-6433 · Vendor Advisory