CVE-2016-7126: php Out-of-bounds Write
Vulnerability summary
CVE-2016-7126 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in php. EPSS estimates a 8.82% chance of exploitation in the next 30 days, higher than 95.1% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 5Timeline
- 12-09-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
8.82%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
No change 0.00 pp
From 8.82% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (bugs.php.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Php1 product
- phpEOL7.0.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | ≤ 5.6.24
1 vendor · 1 product
References
11 links- github.com/php/php-src/commit/b6f13a5ef9d6280cf984826a5de012a32c396cd4?w=1X Refsource CONFIRMIssue TrackingPatch
Show all 11 references
- github.com/php/php-src/commit/28022c9b1fd937436ab67bb3d61f652c108baf96X Refsource CONFIRMPatchVendor Advisory