CVE-2017-11637

GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images

published July 26, 2017

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

⚠️ A NULL pointer dereference in GraphicsMagick's WritePCLImage() function could leave your monochrome image processing in a bit of a bind! 🖼️ Think of it like a waiter attempting to serve a dish that doesn’t exist on the menu — when asked for it, they just stand there confused, and no one gets their meal! In this case, if an attacker sends a specially crafted monochrome image, it could lead to unexpected behavior and potential crashes. While it may not be actively exploited, it’s a vulnerability that can disrupt your image processing workflows in the digital kitchen.

Put simply

Think of it like a waiter attempting to serve a dish that doesn’t exist on the menu — when asked for it, they just stand there confused, and no one gets their meal! This vulnerability occurs due to a NULL pointer dereference when handling monochrome images in GraphicsMagick version 1.3.26, specifically during the WritePCLImage() function. If not handled properly, this could cause the application to crash or behave unpredictably.

What to do

In this case, if an attacker sends a specially crafted monochrome image, it could lead to unexpected behavior and potential crashes. While it may not be actively exploited, it’s a vulnerability that can disrupt your image processing workflows in the digital kitchen. To mitigate this vulnerability, you should upgrade to a later version of GraphicsMagick that addresses this issue. Regularly check for updates and apply them promptly to keep your image processing secure! You've got this! Update your GraphicsMagick to ensure smooth sailing in your image processing adventures! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02095 · 81.5th percentile
Published
2017-07-26T08:00Z
EPSS history
Timeline
  • 26 JUL 08:00Z
    GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images
    cvelistv5