CVE-2021-40145

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.

• CWE-415

• https://github.com/libgd/libgd/commit/c5fd25ce0e48fd5618a972ca9f5e28d6d62006afPatch, Third Party Advisory
• https://github.com/libgd/libgd/issues/700Exploit, Issue Tracking, Third Party Advisory
• https://github.com/libgd/libgd/pull/713Issue Tracking, Third Party Advisory
• https://github.com/libgd/libgd/commit/c5fd25ce0e48fd5618a972ca9f5e28d6d62006afPatch, Third Party Advisory
• https://github.com/libgd/libgd/issues/700Exploit, Issue Tracking, Third Party Advisory
• https://github.com/libgd/libgd/pull/713Issue Tracking, Third Party Advisory

Published

Aug 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40129A vulnerability in the configuration dashboard of Cisco Comm…4.9
• CVE-2021-40130A vulnerability in the web application of Cisco Common Servi…4.9
• CVE-2021-40131A vulnerability in the web-based management interface of Cis…5.4
• CVE-2021-4014Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-40142In OPC Foundation Local Discovery Server (LDS) before 1.04.4…7.5
• CVE-2021-40143Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerabl…8.2
• CVE-2021-40146A Remote Code Execution (RCE) vulnerability was discovered i…9.8
• CVE-2021-40147EmTec ZOC before 8.02.2 allows \e[201~ pastes, a different v…9.8
• CVE-2021-40148In Modem EMM, there is a possible information disclosure due…7.5
• CVE-2021-40149The web server of the E1 Zoom camera through 3.0.0.716 discl…5.9
• CVE-2021-4015firefly-iii is vulnerable to Cross-Site Request Forgery (CSR…4.3
• CVE-2021-40150The web server of the E1 Zoom camera through 3.0.0.716 discl…7.5