In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG...
4.3CVSS6.9AI score0.08005EPSS
SaveExploits0References6
OSV•added 2020/03/18 7:15 p.m.•1 views
DEBIAN-CVE-2019-12921
In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG...