According to the announce on oss-security: An integer overflow vulnerability was found in function gdImageWebpCtx of file gd_webp.c in libgd. It could lead to heap buffer overflow circumstance. Both PHP 7.0.10 and libgd 2.2.3 were affected by this issue. External link: https://github.com/libgd/libgd/issues/308 Upstream patch: https://github.com/libgd/libgd/commit/40bec0f.diff
*** This bug has been marked as a duplicate of bug 595540 ***