USN-5190-1 graphicsmagick vulnerabilities

🗓️ 30 Aug 2022 16:03:50Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

GraphicsMagick flaws allow reading files, memory issues, and heap overflows on Ubuntu ESM.

Reporter	Title	Published	Views	Family All 168
AlpineLinux	CVE-2019-12921	18 Mar 202017:39	–	alpinelinux
AlpineLinux	CVE-2020-10938	24 Mar 202015:28	–	alpinelinux
AlpineLinux	CVE-2020-12672	6 May 202002:47	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в graphicsmagick	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the ThrowException function in the GraphicsMagick graphics editor, related to the use after deallocation, allows a malicious actor to gain unauthorized access to information and compromise its integrity and accessibility.	13 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ImportRLEPixels function in the GraphicsMagick graphics editor arises from writing data beyond the buffer boundaries in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.	13 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of theEncodeImage function in the GraphicsMagick graphics editor allows for reading beyond the allowed buffer data limits. This enables attackers to access confidential data and cause service interruptions.	13 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the command-line application for processing GraphicsMagick image files relates to the disclosure of information, allowing an attacker to access confidential data.	13 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files, related to integer overflow, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.	13 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the coders/png.c component in the cross-platform library for working with graphics in GraphicsMagick, which allows a hacker to trigger a service failure.	23 Sep 202200:00	–	bdu_fstec

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-5190-1
ubuntu	www.ubuntu.com/security/CVE-2019-12921
ubuntu	www.ubuntu.com/security/CVE-2019-19950
ubuntu	www.ubuntu.com/security/CVE-2019-19951
ubuntu	www.ubuntu.com/security/CVE-2019-19953
ubuntu	www.ubuntu.com/security/CVE-2020-10938
ubuntu	www.ubuntu.com/security/CVE-2020-12672

20 May 2026 16:03Current

7.3High risk

Vulners AI Score7.3

CVSS 27.5

CVSS 3.19.8

EPSS0.05098

graphicsmagick arbitrary file read memory allocation error heap overflow denial of service ubuntu esm cve 2019 12921 cve 2019 19950 cve 2019 19951 cve 2019 19953 cve 2020 10938 cve 2020 12672