CVE-2016-6207: Debian Linux

Medium severity, CVSS 6.5. EPSS: 6.3% chance of exploitation in the next 30 days.

Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

Affected products

• Debian Debian Linux: version 8.0 only
• Libgd Libgd: up to and including 2.2.2
• Opensuse Leap: version 42.1 only
• PHP PHP: from 5.5.0, before 5.5.38 (fixed in 5.5.38); from 5.6.0, before 5.6.24 (fixed in 5.6.24); from 7.0.0, before 7.0.9 (fixed in 7.0.9)

Published 2016-08-12. Last modified 2026-06-17.