Threats tagged 'ghsa-f678-5vxr-2r99'

Gumlet php-image-resize versions before 3.0.1 have a denial of service vulnerability due to improper handling of highly compressed images. The vulnerability arises because the ImageResize constructor passes images to GD imagecreatefrom* functions without enforcing pixel limits, allowing attackers to upload small images that decompress into large bitmaps. This can exhaust PHP memory and terminate the worker process.