Filtered by vendor Gumlet Subscriptions
Filtered by product Php-image-resize Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-109398 1 Gumlet 1 Php-image-resize 2026-10-13 7.5 High
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps, exhausting PHP memory and terminating the worker process.