The GD Graphics Library (aka libgd) through 2.2.5 has a Double Free Vulnerability in the gdImageBmpPtr function. CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2018-15878 User=admin}