CVE-2015-8877: The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0,...

Security readout for executives and security teams

This flaw can let a remote user trigger excessive memory use in applications that scale images with vulnerable GD/libgd code, including affected PHP imagescale use. The business impact is service disruption, not data theft, based on the provided sources. Exposure is most likely in web applications or services that accept untrusted image input and use vulnerable libgd or PHP image-scaling functions. The source bundle lists no precise CPEs or downstream product inventory. Prioritize remediation for internet-facing image upload or transformation services. This is a disruption risk with no supplied evidence of active exploitation or data compromise, so handle through normal vulnerability maintenance unless exposed critical services depend on it. Mitigation focus: Upgrade libgd to 2.2.0 or later where directly managed.; Upgrade PHP to 5.6.12 or later where affected PHP GD code is used.; Apply relevant vendor security updates from Red Hat, Ubuntu, or Debian..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.