readheadertga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
References
- https://github.com/libgd/libgd/issues/697
- https://github.com/libgd/libgd/issues/697
- https://github.com/libgd/libgd/pull/711/commits/8b111b2b4a4842179be66db68d84dda91a246032
- https://github.com/libgd/libgd/pull/711/commits/8b111b2b4a4842179be66db68d84dda91a246032
- https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html
- https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html