The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Sep 20, 2017 | Jul 18, 2017 |
| Amazon_linux | — | Upgrade GraphicsMagick | Sep 15, 2017 | Jul 17, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 18, 2017 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Jul 17, 2017 |
| Suse | — | Upgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade perl-GraphicsMagickUpgrade libMagickWand1Upgrade libGraphicsMagick2Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade ImageMagick-develUpgrade libMagick++1Upgrade libMagickWand1-32bitUpgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore1-32bitUpgrade GraphicsMagickUpgrade libMagickCore1 | Jul 28, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade libgraphicsmagick++-q16-12Upgrade libgraphicsmagick-q16-3Upgrade graphicsmagick | Dec 3, 2019 | Jul 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub