Critical Security Update for GD Package: CVE-2026-9672
Summary
RHSA-2026:85102: Red Hat Security Advisory: gd security update. Affects gd versions < 0:2.2.5-7.el8_4.1. Fixed in 0:2.2.5-7.el8_4.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The GD package is a widely used library for the dynamic creation of images in various formats, including PNG, JPEG, and GIF. It is essential for web applications that require image processing capabilities. The library is known for its performance and versatility, making it a popular choice among developers. However, vulnerabilities in this package can lead to severe security risks, including unauthorized access and data corruption.
Vulnerability Detail
CVE-2026-9672 is a critical vulnerability in the GD package that arises from improper handling of certain image formats. This flaw can be exploited by attackers to execute arbitrary code, potentially leading to system compromise. The vulnerability has a CVSS score of 8.1, indicating a high severity level. Attackers can leverage this vulnerability to gain unauthorized access to sensitive data or disrupt service availability.
How To Fix
Minimum fixed version
0:2.2.5-7.el8_4.1
This is the first release that contains the fix.
sudo dnf update gdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the GD library or disable image processing features until the package is updated. However, this may affect the functionality of applications relying on GD for image manipulation.
Conclusion
The GD package has a critical vulnerability (CVE-2026-9672) that requires immediate attention. Users are advised to update to the patched version to mitigate risks associated with this flaw. Regular monitoring and updates are essential to maintain security in applications utilizing this library.
See every vulnerability recorded for gd →
FAQ
CVE-2026-9672 is a critical vulnerability in the GD package that allows attackers to execute arbitrary code due to improper handling of image formats.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score of CVE-2026-9672 is 8.1, indicating a high severity level.
Exploitation of this vulnerability can lead to unauthorized access, data corruption, and service disruption.
You can update the GD package by running the command 'sudo yum update gd' in your terminal.
Related vulnerabilities
Recent vulnerabilities recorded for gd.
