Vulnerability Database

317,182

Total vulnerabilities in the database

CVE-2013-7226

Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a heap-based buffer overflow.

  • Published: Feb 18, 2014
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-7226
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
php / php 5.5.0-alpha1 5.5.0-alpha1.x
php / php 5.5.0-alpha3 5.5.0-alpha3.x
php / php 5.5.0-beta3 5.5.0-beta3.x
php / php 5.5.1 5.5.1.x
php / php 5.5.5 5.5.5.x
php / php 5.5.7 5.5.7.x
php / php 5.5.0-beta1 5.5.0-beta1.x
php / php 5.5.6 5.5.6.x
php / php 5.5.0-rc1 5.5.0-rc1.x
php / php 5.5.0-beta4 5.5.0-beta4.x
php / php 5.5.3 5.5.3.x
php / php 5.5.8 5.5.8.x
php / php 5.5.0-alpha6 5.5.0-alpha6.x
php / php 5.5.0-beta2 5.5.0-beta2.x
php / php 5.5.4 5.5.4.x
php / php 5.5.0-alpha4 5.5.0-alpha4.x
php / php 5.5.0-alpha5 5.5.0-alpha5.x
php / php 5.5.0-alpha2 5.5.0-alpha2.x
php / php 5.5.2 5.5.2.x
php / php 5.5.0-rc2 5.5.0-rc2.x