CVE-2017-17783
- EPSS 1.53%
- Veröffentlicht 20.12.2017 09:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8.
CVE-2017-17498
- EPSS 2.9%
- Veröffentlicht 11.12.2017 02:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafte...
CVE-2017-17500
- EPSS 2.6%
- Veröffentlicht 11.12.2017 02:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file.
CVE-2017-17501
- EPSS 2.6%
- Veröffentlicht 11.12.2017 02:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
CVE-2017-17502
- EPSS 1.92%
- Veröffentlicht 11.12.2017 02:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file.
CVE-2017-17503
- EPSS 1.92%
- Veröffentlicht 11.12.2017 02:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file.
CVE-2017-16669
- EPSS 3.4%
- Veröffentlicht 09.11.2017 00:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in m...
CVE-2017-16547
- EPSS 2.33%
- Veröffentlicht 06.11.2017 05:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service (negative strncpy and application crash) or ...
CVE-2017-16545
- EPSS 2.2%
- Veröffentlicht 05.11.2017 22:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service (ImportIndexQuantumType invalid write and application crash) or possibly have...
CVE-2017-16352
- EPSS 14.51%
- Veröffentlicht 01.11.2017 15:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to...