In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Aug 22, 2024 | Mar 25, 2018 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Mar 25, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2018 |
| Suse | — | Upgrade libMagickWand1Upgrade libMagickWand-6_Q16-1Upgrade libMagick++1Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1Upgrade perl-GraphicsMagickUpgrade libGraphicsMagick2Upgrade perl-PerlMagickUpgrade GraphicsMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++-develUpgrade libMagickWand1-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagickCore1-32bitUpgrade ImageMagickUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore1 | Apr 21, 2018 | Mar 25, 2018 |
| Ubuntu | — | Upgrade graphicsmagick (Ubuntu Pro)Upgrade libgraphicsmagick-q16-3 (Ubuntu Pro)Upgrade libgraphicsmagick3 (Ubuntu Pro)Upgrade graphicsmagickUpgrade libgraphicsmagick-q16-3 | Apr 10, 2023 | Mar 25, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub