CVE-2007-3478: Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before...

Security readout for executives and security teams

This is an old libgd image-rendering flaw that can crash software using vulnerable TrueType text rendering paths. The public record describes denial of service, not data theft or code execution. Business impact is mainly availability for applications that process attacker-influenced images, fonts, or text rendering requests. Exposure is most likely where applications or web services use libgd before 2.0.35 for server-side image generation with TrueType font support. The provided affected-product metadata is incomplete, so package inventories and vendor advisories are needed to confirm local exposure. Handle through normal patch management, with higher priority for Internet-facing image services. The known impact is service disruption, but evidence is incomplete and no active exploitation is cited in the bundle. Mitigation focus: Upgrade libgd to 2.0.35 or a vendor-fixed package.; Review OS vendor advisories for backported fixes.; Limit untrusted inputs to image text-rendering workflows where practical..

Prepared

Jun 29, 2026, 04:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.