CVE-2016-8670

CVE-2016-8670 is a critical integer signedness error in the GD Graphics Library (libgd) affecting versions through 2.2.3, and subsequently impacting PHP versions before 5.6.28 and 7.x before 7.0.13. This vulnerability allows remote attackers to trigger a stack-based buffer overflow and cause a denial of service, or potentially achieve other unspecified impacts, through a crafted imagecreatefromstring call. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for impact on confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it has not garnered widespread attention.