HexBrain

Internet Bug Bounty · Report #305972

Potential infinite loop in gdImageCreateFromGifCtx!

Validstatus
highseverity
$500bounty
8upvotes
12 Nov 2019disclosed

How it was found

Description


It is easy to trigger in web application if the web use GD as its image library. For example, It can be triggered if a website resize the user-uploaded GIF, and ALL PHP version are affected!  

Original bug report


 

Note


  • CVE-2018-5711 assigned

  Thanks :)

Impact

A malicious GIF can trigger an infinite loop and lead to exhausted the server resource!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original