[php-src] Issue #24876: [SECURITY] BUG-051: Integer Overflow - Image Dimension Multiplication Overflow

Issue: https://github.com/php/php-src/issues/24876 Author: Codeleafly ## 🐛 Security Bug Report **Bug ID:** BUG-051 **Category:** Integer Overflow **Subcategory:** Image Dimension Multiplication Overflow **Severity:** High **CWE:** CWE-190 **CVSS Score:** 7.3 **File:** ext/gd/libgd/gd_tga.c **Line:** multiple **Status:** UNFIXED **Verified:** False ### Description Integer overflow in image dimension multiplication (width * height * channels). overflow2() check may not catch all overflow paths leading to undersized buffer allocation. ### Impact Heap buffer overflow, arbitrary code execution via crafted image file. ### Remediation Add comprehensive overflow checks before all memory allocation size calculations in image processing. ### Exploitability Remote via specially crafted image file ### Source - Repository: https://github.com/php/php-src/ - Branch: master - Analysis Date: 2026-10-27T16:38:37.937347Z --- *Auto-generated from static security analysis of php-src.* *Total bugs found: 161*