CVE-2018-14553High · CVSS 7.5EPSS 3.44%No fix publishedCVE-2018-14553gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).doxygenOperating systemsPublished February 11, 2020Updated August 5, 2024Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗