CVE-2016-9933: Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka...

Security readout for executives and security teams

This CVE can make affected PHP/libgd image-processing code crash. It is an availability issue, not described as data theft or code execution in the provided sources. Business urgency depends on whether untrusted users can reach code that calls imagefilltoborder or the underlying GD border-fill function. Exposure is most likely in legacy PHP applications or services using GD/libgd image functions where untrusted input can influence imagefilltoborder parameters. Systems already on fixed PHP/libgd builds, or vendor backported packages, are less likely exposed. Treat this as a legacy availability risk. It should be remediated during normal vulnerability maintenance, faster for internet-facing PHP services that process untrusted image operations or still run unsupported PHP versions. Mitigation focus: Upgrade libgd to 2.2.2 or later where applicable.; Upgrade PHP to 5.6.28, 7.0.13, or later supported vendor builds.; Use Debian, openSUSE, Red Hat, or other vendor backported security packages when applicable..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.