CVE-2007-3476: Gd Graphics Library Gdlib

Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.

Affected products

• Gd Graphics Library Gdlib: up to and including 2.0.34

Published 2007-06-28. Last modified 2026-06-16.