An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large png_pixels array allocation.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Aug 22, 2024 | Mar 5, 2018 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Mar 5, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 5, 2018 |
| Suse | — | Upgrade libMagick++1Upgrade libMagickCore1-32bitUpgrade ImageMagick-develUpgrade libMagickWand1-32bitUpgrade libMagickCore1Upgrade libMagickWand1Upgrade perl-GraphicsMagickUpgrade ImageMagickUpgrade libGraphicsMagick2Upgrade GraphicsMagickUpgrade perl-PerlMagickUpgrade libMagick++-devel | Mar 20, 2018 | Mar 5, 2018 |
| Ubuntu | — | Upgrade libgraphicsmagick-q16-3Upgrade graphicsmagickUpgrade libgraphicsmagick++-q16-12 | Feb 6, 2020 | Mar 5, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub