GR
Product
GraphicsMagick
123
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 17High 46Medium 48Low 0
Watch
Add GraphicsMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8684 | 7.8 | Feb 15 | The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation… Affected: 1.3.25 |
| CVE-2016-8683 | 7.8 | Feb 15 | The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation… Affected: 1.3.25 |
| CVE-2025-27795 | 7.5 | Mar 7 | ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits Affected: before 1.3.46 |
| CVE-2020-12672 | 7.5 | May 6 | GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c Affected: through 1.3.35 |
| CVE-2019-7397 | 7.5 | Feb 5 | In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c Affected: through 1.3.31 |
| CVE-2017-17783 | 7.5 | Dec 20 | In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8 Affected: 1.3.27a |
| CVE-2017-11102 | 7.5 | Jul 7 | The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during JNG reading via a zero-length… Affected: 1.3.26 |
| CVE-2017-9098 | 7.5 | May 19 | ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory… Affected: before 1.3.24 |
| CVE-2016-8682 | 7.5 | Feb 15 | The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header Affected: 1.3.25 |
| CVE-2016-7800 | 7.5 | Feb 6 | Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a… Affected: through 1.3.25 |
| CVE-2016-7449 | 7.5 | Feb 6 | The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an… Affected: 1.3.24 |
| CVE-2016-7448 | 7.5 | Feb 6 | The Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of service (CPU consumption or large memory allocations) via vectors involving the… Affected: through 1.3.24 |
| CVE-2016-7997 | 7.5 | Jan 18 | The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a… Affected: through 1.3.25 |
| CVE-2019-12921 | 6.5 | Mar 18 | In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG Affected: before 1.3.32 |
| CVE-2019-11474 | 6.5 | Apr 23 | coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different… Affected: 1.3.31 |
| CVE-2019-11473 | 6.5 | Apr 23 | coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different… Affected: 1.3.31 |
| CVE-2019-11010 | 6.5 | Apr 8 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of service via a crafted… Affected: through 1.3.31 |
| CVE-2018-20189 | 6.5 | Dec 17 | In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct… Affected: 1.3.31 |
| CVE-2018-20184 | 6.5 | Dec 17 | In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a… Affected: 1.4 |
| CVE-2018-18544 | 6.5 | Oct 21 | There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31 Affected: before 1.3.31 |
| CVE-2018-9018 | 6.5 | Mar 25 | In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c Affected: 1.3.28 |
| CVE-2017-18231 | 6.5 | Mar 14 | An issue was discovered in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2017-18230 | 6.5 | Mar 14 | An issue was discovered in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2017-18229 | 6.5 | Mar 14 | An issue was discovered in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2017-18219 | 6.5 | Mar 5 | An issue was discovered in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2018-5685 | 6.5 | Jan 14 | In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c) Affected: 1.3.27 |
| CVE-2017-16353 | 6.5 | Nov 1 | GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based… Affected: 1.3.26 |
| CVE-2017-15277 | 6.5 | Oct 12 | ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local… Affected: 1.3.26 |
| CVE-2017-14997 | 6.5 | Oct 4 | GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c Affected: 1.3.26 |
| CVE-2017-14994 | 6.5 | Oct 4 | ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the… Affected: 1.3.26 |
| CVE-2017-14733 | 6.5 | Sep 25 | ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based… Affected: 1.3.26 |
| CVE-2017-14504 | 6.5 | Sep 17 | ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference Affected: 1.3.26 |
| CVE-2017-14314 | 6.5 | Sep 12 | Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer… Affected: 1.3.26 |
| CVE-2017-14165 | 6.5 | Sep 6 | The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header Affected: 1.3.26 |
| CVE-2017-14042 | 6.5 | Aug 30 | A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2017-13777 | 6.5 | Aug 30 | GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would… Affected: 1.3.26 |
| CVE-2017-13776 | 6.5 | Aug 30 | GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would… Affected: 1.3.26 |
| CVE-2017-13775 | 6.5 | Aug 30 | GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself… Affected: 1.3.26 |
| CVE-2017-13737 | 6.5 | Aug 29 | There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack Affected: 1.3.26 |
| CVE-2017-13736 | 6.5 | Aug 29 | There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack Affected: 1.3.26 |
| CVE-2017-13648 | 6.5 | Aug 23 | In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c Affected: 1.3.26 |
| CVE-2017-13066 | 6.5 | Aug 22 | GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c Affected: 1.3.26 |
| CVE-2017-13065 | 6.5 | Aug 22 | GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c Affected: 1.3.26 |
| CVE-2017-13064 | 6.5 | Aug 22 | GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12 Affected: 1.3.26 |
| CVE-2017-13063 | 6.5 | Aug 22 | GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12 Affected: 1.3.26 |
| CVE-2017-11722 | 6.5 | Jul 28 | The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a… Affected: 1.3.26 |
| CVE-2020-21679 | 5.5 | Aug 22 | Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to… Affected: 1.4 |
| CVE-2017-14649 | 5.5 | Sep 21 | ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c,… Affected: 1.3.26 |
| CVE-2017-11140 | 5.5 | Jul 10 | The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial… Affected: 1.3.26 |
| CVE-2017-10800 | 5.5 | Jul 3 | When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger… Affected: 1.3.25 |
