CVE-2013-7226

CVE-2013-7226 describes an integer overflow vulnerability in the gdImageCrop function within PHP 5.5.x before version 5.5.9. This flaw allows remote attackers to trigger a denial of service (application crash) or potentially other impacts through a heap-based buffer overflow when processing an imagecrop function call with a large x dimension. With a CVSS score of 6.8, this vulnerability is moderately severe, requiring medium attack complexity and potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, readily available exploit code in common frameworks like Metasploit or Nuclei, nor significant community discussion or media coverage.