GR
Product
GraphicsMagick
123
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 17High 46Medium 48Low 0
Watch
Add GraphicsMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-10799 | 5.5 | Jul 3 | When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of service (OOM) can occur in ReadDPXImage() Affected: 1.3.25 |
| CVE-2017-10794 | 5.5 | Jul 2 | When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to… Affected: 1.3.25 |
| CVE-2017-6335 | 5.5 | Mar 14 | The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application… Affected: through 1.3.25 |
| CVE-2016-9830 | 5.5 | Mar 1 | The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image Affected: 1.3.25 |
| CVE-2016-5240 | 5.5 | Feb 27 | The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite… Affected: through 1.3.23 |
| CVE-2016-5241 | 5.5 | Feb 3 | magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file Affected: through 1.3.23 |
| CVE-2016-2318 | 5.5 | Feb 3 | GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in… Affected: 1.3.23 |
| CVE-2016-2317 | 5.5 | Feb 3 | Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in… Affected: 1.3.23 |
| CVE-2015-8808 | 5.5 | Jul 13 | The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file Affected: through 1.3.17 |
| CVE-2018-20185 | 5.3 | Dec 17 | In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a… Affected: 1.4 |
| CVE-2026-103118 | 4.3 | Sep 30 | GraphicsMagick WPG File wpg.c ExtractPostscript recursion Affected: 1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +34 more |
| CVE-2013-4589 | – | Nov 23 | The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting… Affected: through 1.3.17; 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
| CVE-2012-3438 | – | Aug 7 | The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause… Affected: 1.3.16 |
| CVE-2008-6621 | – | Apr 6 | Unspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors in DPX images Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +20 more |
| CVE-2008-6072 | – | Feb 10 | Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service (crash) via unspecified vectors… Affected: through 1.1.13; 1.0; 1.0.4; 1.0.6; 1.1; 1.1.1; +14 more |
| CVE-2008-6071 | – | Feb 10 | Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of… Affected: through 1.1.13; 1.0; 1.0.4; 1.0.6; 1.1; 1.1.1; +14 more |
| CVE-2008-6070 | – | Feb 10 | Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service (crash) or… Affected: through 1.2.2; 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +18 more |
| CVE-2008-3134 | – | Jul 10 | Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a)… Affected: 1.0; 1.0.4; 1.0.6; 1.1; 1.1.3; 1.1.4; +9 more |
| CVE-2007-0770 | – | Feb 12 | Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is… Affected: All versions, or not specified |
| CVE-2006-5456 | – | Oct 23 | Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via… Affected: through 1.1.6; 1.0; 1.0.6; 1.1; 1.1.3; 1.1.4; +1 more |
| CVE-2005-1739 | – | May 24 | The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero… Affected: 1.0; 1.0.6; 1.1; 1.1.3; 1.1.4; 1.1.5; +1 more |
| CVE-2005-0005 | – | May 2 | Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a… Affected: 1.0; 1.0.6; 1.1; 1.1.3; 1.1.4 |
| CVE-2005-1275 | – | Apr 25 | Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a… Affected: 1.0; 1.0.6; 1.1; 1.1.3; 1.1.4; 1.1.5 |