CVE-2016-5766

CVE-2016-5766 is an integer overflow vulnerability in the GD Graphics Library (libgd) affecting versions before 2.2.3, and subsequently PHP versions before 5.5.37, 5.6.23, and 7.0.8. This flaw allows remote attackers to trigger a heap-based buffer overflow and denial of service, or potentially other impacts, through specially crafted image chunk dimensions. With a CVSS score of 8.8 (High), it presents a significant risk due to its network attack vector and low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.