ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Dec 11, 2017 | Sep 17, 2017 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Sep 17, 2017 |
| Suse | — | Upgrade libGraphicsMagick++-Q16-12-debuginfoUpgrade GraphicsMagick-debugsourceUpgrade GraphicsMagick-debuginfoUpgrade libgraphicsmagick-q16-12Upgrade libgraphicsmagick-q16-3Upgrade perl-GraphicsMagick-debuginfoUpgrade libGraphicsMagickWand-Q16-2-debuginfoUpgrade GraphicsMagickUpgrade libgraphicsmagickwand-q16-2Upgrade libGraphicsMagick-Q16-3-debuginfoUpgrade libgraphicsmagick3-configUpgrade libgraphicsmagick-develUpgrade perl-GraphicsMagickUpgrade graphicsmagick-devel | Dec 20, 2017 | Sep 17, 2017 |
| Ubuntu | — | Upgrade libgraphicsmagick++-q16-12Upgrade libgraphicsmagick-q16-3Upgrade graphicsmagick | Jan 9, 2020 | Sep 17, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub