CVE-2018-1000222: Double Free
Last updated 25 August 2025
Other sources
Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
— Launchpad
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1000222?
CVE-2018-1000222 is a vulnerability in Libgd version 2.2.5 that allows for remote code execution through a double free vulnerability in the gdImageBmpPtr function.
How severe is CVE-2018-1000222?
CVE-2018-1000222 has a severity rating of 8.8, which is considered high.
How can I fix CVE-2018-1000222?
To fix CVE-2018-1000222, you should update to a version of Libgd that has fixed the vulnerability. For example, updating to version 2.1.0-3ubuntu0.10 on Ubuntu Trusty.
Where can I find more information about CVE-2018-1000222?
You can find more information about CVE-2018-1000222 on the MITRE CVE database (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000222) and the Libgd GitHub repository (https://github.com/libgd/libgd/issues/447, https://github.com/libgd/libgd/commit/ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5).
What is the Common Weakness Enumeration (CWE) of CVE-2018-1000222?
The CWE of CVE-2018-1000222 is CWE-415, which is a type of double free vulnerability.