CVE-2004-0990: Gd Graphics Library Gdlib

High severity, CVSS 10.0. EPSS: 28.3% chance of exploitation in the next 30 days.

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

Affected products

• Gd Graphics Library Gdlib: version 1.8.4 only; version 2.0.1 only; version 2.0.15 only; version 2.0.20 only; version 2.0.21 only; version 2.0.22 only; …
• Gentoo Linux: any version
• Openpkg Openpkg: version 2.1 only; version 2.2 only; version current only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only
• Trustix Secure Linux: version 1.5 only; version 2.0 only; version 2.1 only; version 2.2 only

Published 2005-03-01. Last modified 2026-06-16.