GR
Product
GraphicsMagick
123
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 17High 46Medium 48Low 0
Watch
Add GraphicsMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27796 | 9.8 | Mar 7 | ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob Affected: before 1.3.46 |
| CVE-2020-10938 | 9.8 | Mar 24 | GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c Affected: before 1.3.35 |
| CVE-2019-19951 | 9.8 | Dec 24 | In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c Affected: 1.4 |
| CVE-2019-19950 | 9.8 | Dec 24 | In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c Affected: 1.4 |
| CVE-2019-11005 | 9.8 | Apr 8 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attackers to cause a denial… Affected: through 1.3.31 |
| CVE-2017-11643 | 9.8 | Jul 26 | GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths Affected: 1.3.26 |
| CVE-2017-11641 | 9.8 | Jul 26 | GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC) files Affected: 1.3.26 |
| CVE-2017-11637 | 9.8 | Jul 26 | GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images Affected: 1.3.26 |
| CVE-2017-11636 | 9.8 | Jul 26 | GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical widths Affected: 1.3.26 |
| CVE-2017-11139 | 9.8 | Jul 10 | GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c Affected: 1.3.26 |
| CVE-2016-7447 | 9.8 | Feb 6 | Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors Affected: through 1.3.24 |
| CVE-2016-7446 | 9.8 | Feb 6 | Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors Affected: 1.3.24 |
| CVE-2016-7996 | 9.8 | Jan 18 | Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of… Affected: through 1.3.25 |
| CVE-2016-5118 | 9.8 | Jun 10 | The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a… Affected: through 1.3.23 |
| CVE-2025-32460 | 9.1 | Apr 9 | GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call Affected: before 1.3.46 |
| CVE-2019-19953 | 9.1 | Dec 24 | In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c Affected: 1.4 |
| CVE-2019-11006 | 9.1 | Apr 8 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of… Affected: through 1.3.31 |
Showing 17