[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2016-10166":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":21,"downstream":22,"duplicates":49,"related":50,"reserved_at":9,"published_at":57,"modified_at":58,"state":59,"summary":60,"references_raw":69,"kevs":115,"epss":116,"epss_history":119,"metrics":377,"affected":386},"CVE-2016-10166","Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-191","Integer Underflow (Wrap or Wraparound)","The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.","weakness","Draft","Base",[],[],[],[],[23,25,27,29,31,33,35,37,39,41,43,45,47],{"_key":24},"ALPINE-CVE-2016-10166",{"_key":26},"SUSE-SU-2017:0468-1",{"_key":28},"SUSE-SU-2017:0534-1",{"_key":30},"SUSE-SU-2017:0556-1",{"_key":32},"SUSE-SU-2017:0568-1",{"_key":34},"OPENSUSE-SU-2024:10777-1",{"_key":36},"DSA-3777-1",{"_key":38},"MGASA-2017-0055",{"_key":40},"UBUNTU-CVE-2016-10166",{"_key":42},"USN-3213-1",{"_key":44},"DEBIAN-CVE-2016-10166",{"_key":46},"RHSA-2019:2519",{"_key":48},"RHSA-2019:3299",[],[51,52,53,54,55,56],{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":38},"2017-03-15T15:00:00.000Z","2024-08-06T03:14:42.080Z","Modified",{"cisa_kev":61,"cisa_ransomware":61,"cisa_vendor":9,"epss_severity":62,"epss_score":63,"severity":64,"severity_score":65,"severity_version":66,"severity_source":67,"severity_vector":68,"severity_status":59},false,"low",0.06873,"critical",9.8,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[70,79,83,90,95,100,106,111],{"url":71,"sources":72,"tags":74},"http://www.openwall.com/lists/oss-security/2017/01/26/1",[73,67],"cve.org",[75,76,77,78],"Mailing List","X Refsource MLIST","Patch","Third Party Advisory",{"url":80,"sources":81,"tags":82},"http://www.openwall.com/lists/oss-security/2017/01/28/6",[73,67],[75,76,77,78],{"url":84,"sources":85,"tags":86},"http://libgd.github.io/release-2.2.4.html",[73,67],[87,88,89],"X Refsource CONFIRM","Release Notes","Vendor Advisory",{"url":91,"sources":92,"tags":93},"https://github.com/libgd/libgd/commit/60bfb401ad5a4a8ae995dcd36372fe15c71e1a35",[73,67],[87,94,77,78],"Issue Tracking",{"url":96,"sources":97,"tags":98},"http://www.debian.org/security/2017/dsa-3777",[73,67],[89,99],"X Refsource DEBIAN",{"url":101,"sources":102,"tags":103},"http://www.securityfocus.com/bid/95869",[73,67],[104,105,78],"VDB Entry","X Refsource BID",{"url":107,"sources":108,"tags":109},"https://access.redhat.com/errata/RHSA-2019:2519",[73,67],[89,110],"X Refsource REDHAT",{"url":112,"sources":113,"tags":114},"https://access.redhat.com/errata/RHSA-2019:3299",[73,67],[89,110],[],{"date":117,"score":63,"percentile":118},"2026-06-04",0.91531,[120,124,127,129,132,135,137,139,142,145,148,151,153,156,159,162,165,168,171,173,176,179,181,183,186,189,192,195,199,202,205,207,210,213,216,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,292,295,298,301,304,306,309,312,315,317,319,321,324,327,329,332,336,339,342,345,348,351,354,357,360,363,366,368,371,374],{"date":121,"score":122,"percentile":123},"2025-11-04",0.08333,0.91881,{"date":125,"score":122,"percentile":126},"2025-11-05",0.91879,{"date":128,"score":122,"percentile":123},"2025-11-06",{"date":130,"score":122,"percentile":131},"2025-11-07",0.91883,{"date":133,"score":122,"percentile":134},"2025-11-08",0.91882,{"date":136,"score":122,"percentile":123},"2025-11-09",{"date":138,"score":122,"percentile":134},"2025-11-10",{"date":140,"score":122,"percentile":141},"2025-11-11",0.91888,{"date":143,"score":122,"percentile":144},"2025-11-12",0.91893,{"date":146,"score":122,"percentile":147},"2025-11-13",0.91895,{"date":149,"score":122,"percentile":150},"2025-11-14",0.91897,{"date":152,"score":122,"percentile":144},"2025-11-15",{"date":154,"score":122,"percentile":155},"2025-11-16",0.919,{"date":157,"score":122,"percentile":158},"2025-11-17",0.91902,{"date":160,"score":122,"percentile":161},"2025-11-18",0.91397,{"date":163,"score":122,"percentile":164},"2025-11-19",0.91401,{"date":166,"score":122,"percentile":167},"2025-11-20",0.91406,{"date":169,"score":122,"percentile":170},"2025-11-21",0.91911,{"date":172,"score":122,"percentile":170},"2025-11-22",{"date":174,"score":122,"percentile":175},"2025-11-23",0.91916,{"date":177,"score":122,"percentile":178},"2025-11-24",0.91917,{"date":180,"score":122,"percentile":178},"2025-11-25",{"date":182,"score":122,"percentile":178},"2025-11-26",{"date":184,"score":122,"percentile":185},"2025-11-27",0.91915,{"date":187,"score":122,"percentile":188},"2025-11-28",0.91907,{"date":190,"score":122,"percentile":191},"2025-11-29",0.91931,{"date":193,"score":122,"percentile":194},"2025-11-30",0.9193,{"date":196,"score":197,"percentile":198},"2025-12-01",0.03513,0.87259,{"date":200,"score":197,"percentile":201},"2025-12-02",0.8726,{"date":203,"score":197,"percentile":204},"2025-12-03",0.87258,{"date":206,"score":122,"percentile":191},"2025-12-04",{"date":208,"score":122,"percentile":209},"2025-12-05",0.91933,{"date":211,"score":122,"percentile":212},"2025-12-06",0.91936,{"date":214,"score":122,"percentile":215},"2025-12-07",0.91934,{"date":217,"score":122,"percentile":215},"2025-12-08",{"date":219,"score":122,"percentile":220},"2025-12-09",0.91939,{"date":222,"score":122,"percentile":223},"2025-12-10",0.91948,{"date":225,"score":122,"percentile":226},"2025-12-11",0.91951,{"date":228,"score":122,"percentile":229},"2025-12-12",0.91953,{"date":231,"score":122,"percentile":232},"2025-12-13",0.91944,{"date":234,"score":122,"percentile":235},"2025-12-14",0.9194,{"date":237,"score":122,"percentile":238},"2025-12-15",0.91942,{"date":240,"score":122,"percentile":241},"2025-12-16",0.91954,{"date":243,"score":122,"percentile":244},"2025-12-17",0.91959,{"date":246,"score":122,"percentile":247},"2025-12-18",0.91963,{"date":249,"score":122,"percentile":250},"2025-12-19",0.91966,{"date":252,"score":122,"percentile":253},"2025-12-20",0.91968,{"date":255,"score":122,"percentile":256},"2025-12-21",0.91969,{"date":258,"score":122,"percentile":259},"2025-12-22",0.91967,{"date":261,"score":122,"percentile":262},"2025-12-23",0.9197,{"date":264,"score":122,"percentile":265},"2025-12-24",0.91975,{"date":267,"score":122,"percentile":268},"2025-12-25",0.91979,{"date":270,"score":122,"percentile":271},"2025-12-26",0.91978,{"date":273,"score":122,"percentile":274},"2025-12-27",0.92003,{"date":276,"score":122,"percentile":277},"2025-12-28",0.91974,{"date":279,"score":122,"percentile":280},"2025-12-29",0.91971,{"date":282,"score":122,"percentile":283},"2025-12-30",0.91977,{"date":285,"score":122,"percentile":286},"2025-12-31",0.91984,{"date":288,"score":197,"percentile":289},"2026-01-01",0.87331,{"date":291,"score":197,"percentile":289},"2026-01-02",{"date":293,"score":197,"percentile":294},"2026-01-03",0.8733,{"date":296,"score":122,"percentile":297},"2026-01-04",0.91992,{"date":299,"score":122,"percentile":300},"2026-01-05",0.91991,{"date":302,"score":122,"percentile":303},"2026-01-06",0.91993,{"date":305,"score":122,"percentile":297},"2026-01-07",{"date":307,"score":122,"percentile":308},"2026-01-08",0.91995,{"date":310,"score":122,"percentile":311},"2026-01-09",0.91998,{"date":313,"score":122,"percentile":314},"2026-01-10",0.92,{"date":316,"score":122,"percentile":297},"2026-01-11",{"date":318,"score":122,"percentile":303},"2026-01-12",{"date":320,"score":122,"percentile":303},"2026-01-13",{"date":322,"score":122,"percentile":323},"2026-01-14",0.92006,{"date":325,"score":122,"percentile":326},"2026-01-15",0.92009,{"date":328,"score":122,"percentile":326},"2026-01-16",{"date":330,"score":122,"percentile":331},"2026-01-17",0.92015,{"date":333,"score":334,"percentile":335},"2026-01-18",0.08997,0.92365,{"date":337,"score":334,"percentile":338},"2026-01-19",0.92366,{"date":340,"score":334,"percentile":341},"2026-01-20",0.92369,{"date":343,"score":122,"percentile":344},"2026-01-21",0.9202,{"date":346,"score":122,"percentile":347},"2026-01-22",0.92023,{"date":349,"score":122,"percentile":350},"2026-01-23",0.92031,{"date":352,"score":122,"percentile":353},"2026-01-24",0.92038,{"date":355,"score":122,"percentile":356},"2026-01-25",0.92039,{"date":358,"score":122,"percentile":359},"2026-01-26",0.92042,{"date":361,"score":122,"percentile":362},"2026-01-27",0.92043,{"date":364,"score":122,"percentile":365},"2026-01-28",0.92048,{"date":367,"score":122,"percentile":365},"2026-01-29",{"date":369,"score":122,"percentile":370},"2026-01-30",0.92047,{"date":372,"score":122,"percentile":373},"2026-01-31",0.92046,{"date":375,"score":197,"percentile":376},"2026-02-01",0.87374,[378],{"source":67,"cvss_v2_0":379,"cvss_v3_0":384,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":380,"baseSeverity":9,"vectorString":381,"impactScore":382,"exploitabilityScore":383},7.5,"AV:N/AC:L/Au:N/C:P/I:P/A:P",6.4,10,{"baseScore":65,"baseSeverity":385,"vectorString":68,"impactScore":65,"exploitabilityScore":383},"CRITICAL",[387],{"ecosystem":9,"name":388,"vendor":388,"product":388,"cpe_part":389,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":390},"libgd","a",[391],{"version":392,"is_range":393,"range_type":394,"version_start":9,"version_start_type":9,"version_end":395,"version_end_type":396,"fixed_in":9},"lte2.2.3",true,"cpe","2.2.3","including"]