ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Dec 11, 2017 | Sep 17, 2017 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Sep 17, 2017 |
| Suse | — | Upgrade libgraphicsmagick-develUpgrade libgraphicsmagickwand-q16-2Upgrade GraphicsMagickUpgrade libgraphicsmagick3-configUpgrade libGraphicsMagickWand-Q16-2-debuginfoUpgrade libGraphicsMagick-Q16-3-debuginfoUpgrade perl-GraphicsMagickUpgrade graphicsmagick-develUpgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-debugsourceUpgrade libGraphicsMagick++-Q16-12-debuginfoUpgrade libgraphicsmagick-q16-3Upgrade perl-GraphicsMagick-debuginfoUpgrade libgraphicsmagick-q16-12 | Dec 20, 2017 | Sep 17, 2017 |
| Ubuntu | — | Upgrade libgraphicsmagick-q16-3Upgrade graphicsmagickUpgrade libgraphicsmagick++-q16-12 | Jan 9, 2020 | Sep 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub