Vulnerabilidades de Gumlet

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Gumlet: 1 registro(s), com severidade, exploração e correções.

Php-image-resize 1

Somente exploradas (KEV) →

CVE-2026-109398 Alta · 7.5 CWE-409 12/10/2026

Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs

Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps, exhausting PHP memory and terminating the worker process.