Bug 2533111 (CVE-2026-9672) - CVE-2026-9672 libgd: buffer overflow when processing specially crafted GIF file
Summary: CVE-2026-9672 libgd: buffer overflow when processing specially crafted GIF file
Keywords:
Status: NEW
Alias: CVE-2026-9672
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2533187 2533188 2533193 2533186 2533190 2533192 2533194 2533198
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-14 14:32 UTC by OSIDB Bzimport
Modified: 2026-10-19 13:02 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2026:75680 0 None None None 2026-10-05 09:09:30 UTC
Red Hat Product Errata RHSA-2026:80500 0 None None None 2026-10-12 01:37:48 UTC
Red Hat Product Errata RHSA-2026:81517 0 None None None 2026-10-12 21:37:41 UTC
Red Hat Product Errata RHSA-2026:81518 0 None None None 2026-10-12 20:48:00 UTC
Red Hat Product Errata RHSA-2026:84579 0 None None None 2026-10-19 02:42:24 UTC
Red Hat Product Errata RHSA-2026:84580 0 None None None 2026-10-19 02:42:58 UTC
Red Hat Product Errata RHSA-2026:84581 0 None None None 2026-10-19 02:40:09 UTC
Red Hat Product Errata RHSA-2026:85099 0 None None None 2026-10-19 12:48:39 UTC
Red Hat Product Errata RHSA-2026:85102 0 None None None 2026-10-19 12:47:31 UTC
Red Hat Product Errata RHSA-2026:85132 0 None None None 2026-10-19 13:02:45 UTC

Description OSIDB Bzimport 2026-09-14 14:32:37 UTC 
A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression and pixel manipulation generally destroy the exploit payload.
Comment 3 Jon Orris 2026-10-05 09:09:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:75680 https://access.redhat.com/errata/RHSA-2026:75680
Comment 4 Jon Orris 2026-10-12 01:37:47 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:80500 https://access.redhat.com/errata/RHSA-2026:80500
Comment 5 Jon Orris 2026-10-12 20:47:59 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:81518 https://access.redhat.com/errata/RHSA-2026:81518
Comment 6 Jon Orris 2026-10-12 21:37:40 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:81517 https://access.redhat.com/errata/RHSA-2026:81517
Comment 7 Jon Orris 2026-10-19 02:40:08 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:84581 https://access.redhat.com/errata/RHSA-2026:84581
Comment 8 Jon Orris 2026-10-19 02:42:23 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:84579 https://access.redhat.com/errata/RHSA-2026:84579
Comment 9 Jon Orris 2026-10-19 02:42:57 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:84580 https://access.redhat.com/errata/RHSA-2026:84580
Comment 10 Jon Orris 2026-10-19 12:47:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:85102 https://access.redhat.com/errata/RHSA-2026:85102
Comment 11 Jon Orris 2026-10-19 12:48:38 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:85099 https://access.redhat.com/errata/RHSA-2026:85099
Comment 12 Jon Orris 2026-10-19 13:02:44 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:85132 https://access.redhat.com/errata/RHSA-2026:85132
Note You need to log in before you can comment on or make changes to this bug.