An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile allocations.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Aug 22, 2024 | Mar 14, 2018 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Mar 13, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 14, 2018 |
| Suse | — | Upgrade libGraphicsMagick2Upgrade GraphicsMagickUpgrade perl-GraphicsMagick | May 3, 2018 | Mar 13, 2018 |
| Ubuntu | — | Upgrade graphicsmagickUpgrade libgraphicsmagick-q16-3Upgrade libgraphicsmagick++-q16-12 | Feb 6, 2020 | Mar 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub