CVE-2007-2756

MEDIUM · CVSS 4.3 EPSS 4.27%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-05-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-2756

Severity

MEDIUM

CVSS

4.3

EPSS

4.27%

Original Filing — NVD Description

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.