8.1 High
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.3%
The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an “unterminated” string.
lists.opensuse.org/opensuse-updates/2016-10/msg00094.html
lists.opensuse.org/opensuse-updates/2016-10/msg00097.html
www.openwall.com/lists/oss-security/2016/09/18/8
www.securityfocus.com/bid/93074
bugzilla.redhat.com/show_bug.cgi?id=1374233
lists.debian.org/debian-lts-announce/2018/06/msg00009.html