The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Sep 20, 2017 | Jul 18, 2017 |
| Amazon_linux | — | Upgrade GraphicsMagick | Sep 15, 2017 | Jul 17, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 18, 2017 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Jul 17, 2017 |
| Suse | — | Upgrade perl-GraphicsMagickUpgrade ImageMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-6_Q16-1Upgrade libMagick++-develUpgrade libGraphicsMagick2Upgrade libMagickWand1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1-32bitUpgrade perl-PerlMagickUpgrade ImageMagick-develUpgrade libMagickCore1-32bitUpgrade libMagick++1Upgrade libMagickCore-6_Q16-1Upgrade libMagickCore1Upgrade GraphicsMagick | Jul 28, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade libgraphicsmagick-q16-3Upgrade graphicsmagickUpgrade libgraphicsmagick++-q16-12 | Dec 3, 2019 | Jul 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub