The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade graphicsmagick | Jul 30, 2024 | Aug 7, 2012 |
| Freebsd | — | Upgrade GraphicsMagick-nox11Upgrade ImageMagickUpgrade GraphicsMagickUpgrade ImageMagick-nox11 | Dec 10, 2025 | Sep 20, 2012 |
| Suse | — | Upgrade ImageMagick-develUpgrade libMagick++1Upgrade libMagickWand1-32bitUpgrade libMagickCore1-32bitUpgrade perl-GraphicsMagickUpgrade ImageMagickUpgrade libMagickWand1Upgrade libMagickCore1Upgrade GraphicsMagickUpgrade perl-PerlMagickUpgrade libGraphicsMagick2Upgrade libMagick++-devel | Dec 12, 2013 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub