GR
Product
GraphicsMagick
by Graphicsmagick · last CVE Sep 30, 2026
123
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 17High 46Medium 48Low 0
Watch

Add GraphicsMagick to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-12921
6.5
8%
Mar 18
In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG
Affected: before 1.3.32
CVE-2019-11474
6.5
2%
Apr 23
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different…
Affected: 1.3.31
CVE-2019-11473
6.5
2%
Apr 23
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different…
Affected: 1.3.31
CVE-2019-11010
6.5
2%
Apr 8
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of service via a crafted…
Affected: through 1.3.31
CVE-2018-20189
6.5
2%
Dec 17
In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct…
Affected: 1.3.31
CVE-2018-20184
6.5
2%
Dec 17
In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a…
Affected: 1.4
CVE-2018-18544
6.5
2%
Oct 21
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31
Affected: before 1.3.31
CVE-2018-9018
6.5
3%
Mar 25
In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c
Affected: 1.3.28
CVE-2017-18231
6.5
2%
Mar 14
An issue was discovered in GraphicsMagick 1.3.26
Affected: 1.3.26
CVE-2017-18230
6.5
2%
Mar 14
An issue was discovered in GraphicsMagick 1.3.26
Affected: 1.3.26
CVE-2017-18229
6.5
2%
Mar 14
An issue was discovered in GraphicsMagick 1.3.26
Affected: 1.3.26
CVE-2017-18219
6.5
3%
Mar 5
An issue was discovered in GraphicsMagick 1.3.26
Affected: 1.3.26
CVE-2018-5685
6.5
2%
Jan 14
In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c)
Affected: 1.3.27
CVE-2017-16353
6.5
14%
Nov 1
GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based…
Affected: 1.3.26
CVE-2017-15277
6.5
19%
Oct 12
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local…
Affected: 1.3.26
CVE-2017-14997
6.5
3%
Oct 4
GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c
Affected: 1.3.26
CVE-2017-14994
6.5
3%
Oct 4
ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the…
Affected: 1.3.26
CVE-2017-14733
6.5
2%
Sep 25
ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based…
Affected: 1.3.26
CVE-2017-14504
6.5
2%
Sep 17
ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference
Affected: 1.3.26
CVE-2017-14314
6.5
2%
Sep 12
Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer…
Affected: 1.3.26
CVE-2017-14165
6.5
2%
Sep 6
The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header
Affected: 1.3.26
CVE-2017-14042
6.5
2%
Aug 30
A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26
Affected: 1.3.26
CVE-2017-13777
6.5
2%
Aug 30
GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would…
Affected: 1.3.26
CVE-2017-13776
6.5
2%
Aug 30
GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would…
Affected: 1.3.26
CVE-2017-13775
6.5
2%
Aug 30
GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself…
Affected: 1.3.26
CVE-2017-13737
6.5
3%
Aug 29
There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack
Affected: 1.3.26
CVE-2017-13736
6.5
2%
Aug 29
There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack
Affected: 1.3.26
CVE-2017-13648
6.5
1%
Aug 23
In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c
Affected: 1.3.26
CVE-2017-13066
6.5
1%
Aug 22
GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c
Affected: 1.3.26
CVE-2017-13065
6.5
2%
Aug 22
GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c
Affected: 1.3.26
CVE-2017-13064
6.5
2%
Aug 22
GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12
Affected: 1.3.26
CVE-2017-13063
6.5
2%
Aug 22
GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12
Affected: 1.3.26
CVE-2017-11722
6.5
2%
Jul 28
The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a…
Affected: 1.3.26
CVE-2020-21679
5.5
0%
Aug 22
Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to…
Affected: 1.4
CVE-2017-14649
5.5
1%
Sep 21
ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c,…
Affected: 1.3.26
CVE-2017-11140
5.5
2%
Jul 10
The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial…
Affected: 1.3.26
CVE-2017-10800
5.5
1%
Jul 3
When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger…
Affected: 1.3.25
CVE-2017-10799
5.5
1%
Jul 3
When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of service (OOM) can occur in ReadDPXImage()
Affected: 1.3.25
CVE-2017-10794
5.5
2%
Jul 2
When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to…
Affected: 1.3.25
CVE-2017-6335
5.5
2%
Mar 14
The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application…
Affected: through 1.3.25
CVE-2016-9830
5.5
2%
Mar 1
The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image
Affected: 1.3.25
CVE-2016-5240
5.5
2%
Feb 27
The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite…
Affected: through 1.3.23
CVE-2016-5241
5.5
2%
Feb 3
magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file
Affected: through 1.3.23
CVE-2016-2318
5.5
2%
Feb 3
GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in…
Affected: 1.3.23
CVE-2016-2317
5.5
2%
Feb 3
Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in…
Affected: 1.3.23
CVE-2015-8808
5.5
2%
Jul 13
The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file
Affected: through 1.3.17
CVE-2018-20185
5.3
2%
Dec 17
In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a…
Affected: 1.4
CVE-2026-103118
4.3
0%
Sep 30
GraphicsMagick WPG File wpg.c ExtractPostscript recursion
Affected: 1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +34 more
Showing 48