CVE-2006-4484: PHP

Low severity, CVSS 2.6. EPSS: 8.7% chance of exploitation in the next 30 days.

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.

Affected products

• PHP PHP: version 5.1.0 only; version 5.1.1 only; version 5.1.2 only; version 5.1.4 only

Published 2006-08-31. Last modified 2026-06-16.