Description
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps, exhausting PHP memory and terminating the worker process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gumlet | php-image-resize | < 3.0.1 | 3.0.1 |
References
- GitHub Security Advisory (GHSA-3g9v-hjrx-mg5h) vendor-advisory
- https://github.com/gumlet/php-image-resize/commit/10c1f386e672536d82be0f39b236a80d87767a50 patch
- https://github.com/gumlet/php-image-resize/commit/cd01c9e8aa2382211d760c825799c8102987a8c2 patch
- https://github.com/gumlet/php-image-resize/blob/3.0.0/lib/ImageResize.php#L122-L163 technical-description
- php-image-resize 3.0.1 Release Notes release-notes
- VulnCheck Advisory: Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs third-party-advisory