ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c, and application crash).
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Dec 11, 2017 | Sep 21, 2017 |
| Debian | — | Upgrade graphicsmagick | Jul 30, 2024 | Sep 21, 2017 |
| Suse | — | Upgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade libMagickWand1Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libGraphicsMagick2Upgrade perl-GraphicsMagickUpgrade libMagickWand-6_Q16-1Upgrade libMagick++-develUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade GraphicsMagickUpgrade libMagick++1Upgrade libMagickWand1-32bitUpgrade libMagickCore1Upgrade libMagickCore1-32bit | Feb 4, 2018 | Sep 21, 2017 |
| Ubuntu | — | Upgrade graphicsmagickUpgrade libgraphicsmagick-q16-3Upgrade libgraphicsmagick++-q16-12 | Jan 9, 2020 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub