CVE-2017-18231

GraphicsMagick 1.3.26 contains a NULL pointer dereference in ReadEnhMetaFile (coders/emf.c) that can trigger Denial of Service with a crafted EMF file. No explicit fix/version is stated in the provided documents; remediation details are not available here. If exploiting, the attack would not requ...

CVE-2017-18230

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

Design/Logic Flaw

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

GraphicsMagick 'ImportCMYKQuantumType' function heap buffer overflow vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. The 'ReadCMYKImage' function in the coders/cmyk.c file and the 'ImportCMYKQuantumType' function in the magick/import.c file in GraphicsMagick version 1.3.26...

GraphicsMagick 'ImportGrayQuantumType' function heap buffer overflow vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. The 'ReadGRAYImage' function in the coders/gray.c file and the 'ImportGrayQuantumType' function in the magick/import.c file in GraphicsMagick version 1.3.26...

GraphicsMagick 'WriteOnePNGImage' function heap buffer overflow vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A heap buffer overflow vulnerability exists in the 'WriteOnePNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. An attacker can...

CVE-2017-17498

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service bitstream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

Heap overflow

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

Heap overflow

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...

Heap overflow

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

UBUNTU-CVE-2017-17503

ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17503

ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17502

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17500

GraphicsMagick 1.3.26 is affected by CVE-2017-17500 due to a heap-based buffer over-read in ReadRGBImage (coders/rgb.c) triggered by a crafted image. The root cause is an error in ImportRGBQuantumType handling that can lead to out-of-bounds reads, with high impact on confidentiality, integrity an...

CVE-2017-17500

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17501

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

CVE-2017-17501

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

CVE-2017-17498

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service bitstream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-36390)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the coders/wpg.c file in GraphicsMagick version 1.3.26. A remote attacker can exploit this vulnerability to cause a denial...