Internet Bug Bounty · Report #305972
Potential infinite loop in gdImageCreateFromGifCtx!
Validstatus
highseverity
$500bounty
8upvotes
12 Nov 2019disclosed
How it was found
Description
It is easy to trigger in web application if the web use GD as its image library. For example, It can be triggered if a website resize the user-uploaded GIF, and ALL PHP version are affected!
Original bug report
Note
- CVE-2018-5711 assigned
Thanks :)
Impact
A malicious GIF can trigger an infinite loop and lead to exhausted the server resource!