{
    "id": "CVE-2016-3074",
    "published": "2016-04-26 14:59:01",
    "last_modified": "2026-06-17 00:44:55",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-681",
    "description": "Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.",
    "epss_score": "0.37226",
    "epss_percentile": "0.98476",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-27 18:17:16",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "canonical",
            "product": "ubuntu_linux"
        },
        {
            "vendor": "debian",
            "product": "debian_linux"
        },
        {
            "vendor": "fedoraproject",
            "product": "fedora"
        },
        {
            "vendor": "libgd",
            "product": "libgd"
        },
        {
            "vendor": "opensuse",
            "product": "opensuse"
        },
        {
            "vendor": "php",
            "product": "php"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "39736",
            "title": "libgd 2.1.1 - Signedness Heap Overflow",
            "date": "2016-04-26",
            "url": "https://www.exploit-db.com/exploits/39736"
        }
    ],
    "refs_list": [
        "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183263.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183724.html",
        "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html",
        "http://packetstormsecurity.com/files/136757/libgd-2.1.1-Signedness.html",
        "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
        "http://seclists.org/fulldisclosure/2016/Apr/72",
        "http://www.debian.org/security/2016/dsa-3556",
        "http://www.debian.org/security/2016/dsa-3602",
        "http://www.securityfocus.com/archive/1/538160/100/0/threaded",
        "http://www.securityfocus.com/bid/87087",
        "http://www.securitytracker.com/id/1035659",
        "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.383127",
        "http://www.ubuntu.com/usn/USN-2987-1",
        "https://github.com/libgd/libgd/commit/2bb97f407c1145c850416a3bfbcc8cf124e68a19",
        "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
        "https://security.gentoo.org/glsa/201607-04",
        "https://security.gentoo.org/glsa/201611-22",
        "https://www.exploit-db.com/exploits/39736/",
        "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183263.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183724.html",
        "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html",
        "http://packetstormsecurity.com/files/136757/libgd-2.1.1-Signedness.html",
        "http://rhn.redhat.com/errata/RHSA-2016-2750.html",
        "http://seclists.org/fulldisclosure/2016/Apr/72",
        "http://www.debian.org/security/2016/dsa-3556"
    ]
}