CVE-2006-2906: Thomas Boutell Graphics Draw Library

Medium severity, CVSS 5.4. EPSS: 10.4% chance of exploitation in the next 30 days.

The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop.

Affected products

• Thomas Boutell Graphics Draw Library: version 2.0.33 only

Published 2006-06-08. Last modified 2026-06-16.