CVE-2019-11038

CVE-2019-11038 is a medium-severity vulnerability affecting the GD Graphics Library (LibGD) versions 2.2.5 and specific PHP GD extension versions (7.1.x below 7.1.30, 7.2.x below 7.2.19, and 7.3.x below 7.3.6), impacting various Linux distributions. It allows an attacker to supply specially crafted data to the gdImageCreateFromXbm() function, leading to the disclosure of uninitialized stack memory. The vulnerability has a CVSS score of 5.3, indicating a low impact on confidentiality with no integrity or availability impact, and can be exploited remotely with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting a low current threat landscape.