CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.

• CWE-119

• http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html
• http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html
• http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html
• http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html
• http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html
• http://www.debian.org/security/2017/dsa-3751
• http://www.openwall.com/lists/oss-security/2016/12/12/2Third Party Advisory
• http://www.php.net/ChangeLog-5.phpRelease Notes, Vendor Advisory
• http://www.php.net/ChangeLog-7.phpRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/94865
• https://access.redhat.com/errata/RHSA-2018:1296
• https://bugs.php.net/bug.php?id=72696Vendor Advisory
• https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40ePatch, Vendor Advisory
• https://github.com/libgd/libgd/issues/215Vendor Advisory
• https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html
• http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html
• http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html
• http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html
• http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html
• http://www.debian.org/security/2017/dsa-3751
• http://www.openwall.com/lists/oss-security/2016/12/12/2Third Party Advisory
• http://www.php.net/ChangeLog-5.phpRelease Notes, Vendor Advisory
• http://www.php.net/ChangeLog-7.phpRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/94865
• https://access.redhat.com/errata/RHSA-2018:1296
• https://bugs.php.net/bug.php?id=72696Vendor Advisory
• https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40ePatch, Vendor Advisory
• https://github.com/libgd/libgd/issues/215Vendor Advisory
• https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1Vendor Advisory

Published

Jan 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9921Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Em…6.5
• CVE-2016-9922The cirrus_do_copy function in hw/display/cirrus_vga.c in QE…5.5
• CVE-2016-9923Quick Emulator (Qemu) built with the 'chardev' backend suppo…5.5
• CVE-2016-9924Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote …
• CVE-2016-9928MCabber before 1.0.4 is vulnerable to roster push attacks, w…7.4
• CVE-2016-9932CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 system…
• CVE-2016-9934ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 a…
• CVE-2016-9935The php_wddx_push_element function in ext/wddx/wddx.c in PHP…
• CVE-2016-9936The unserialize implementation in ext/standard/var.c in PHP …
• CVE-2016-9937An issue was discovered in Asterisk Open Source 13.12.x and …
• CVE-2016-9938An issue was discovered in Asterisk Open Source 11.x before …
• CVE-2016-9939Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bu…