Description
The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-14790 Vulnerability (CVE-2020-14790)
WordPress Plugin Images to WebP Multiple Vulnerabilities (1.8)
Oracle Application Server Other Vulnerability (CVE-2001-1217)
SugarCRM Other Vulnerability (CVE-2006-2460)
WordPress Plugin Data Tables Generator by Supsystic Multiple Vulnerabilities (1.9.96)