CVE-2016-6905

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.

• CWE-125

• http://libgd.github.io/release-2.2.3.html
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2016/08/23/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/91743Third Party Advisory, VDB Entry
• https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03Issue Tracking, Patch
• https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186Issue Tracking, Patch
• https://github.com/libgd/libgd/issues/248Issue Tracking, Patch
• https://github.com/libgd/libgd/pull/251Issue Tracking, Patch
• http://libgd.github.io/release-2.2.3.html
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2016/08/23/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/91743Third Party Advisory, VDB Entry
• https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03Issue Tracking, Patch
• https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186Issue Tracking, Patch
• https://github.com/libgd/libgd/issues/248Issue Tracking, Patch
• https://github.com/libgd/libgd/pull/251Issue Tracking, Patch

Published

Oct 3, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6899The Intelligent Baseboard Management Controller (iBMC) in Hu…
• CVE-2016-6900The Intelligent Baseboard Management Controller (iBMC) in Hu…
• CVE-2016-6901Format string vulnerability in Huawei AR100, AR120, AR150, A…
• CVE-2016-6902lshell 0.9.16 allows remote authenticated users to break out…
• CVE-2016-6903lshell 0.9.16 allows remote authenticated users to break out…
• CVE-2016-6904Versions of VASA Provider for Clustered Data ONTAP prior to …
• CVE-2016-6906The read_image_tga function in gd_tga.c in the GD Graphics L…
• CVE-2016-6908Characters from languages are such as Arabic, Hebrew are dis…
• CVE-2016-6909Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x…
• CVE-2016-6910The non-existent notification listener vulnerability was int…
• CVE-2016-6911The dynamicGetbuf function in the GD Graphics Library (aka l…
• CVE-2016-6912Double free vulnerability in the gdImageWebPtr function in t…