CVE-2017-16352

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage()…

published November 1, 2017

CVSS
—
EPSS
15%
Percentile
96.6
In the wild
Unconfirmed
What it is

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14512 · 96.6th percentile
Published
2017-11-01T15:00Z
EPSS history
Timeline
  • 01 NOV 15:00Z
    GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage()…
    cvelistv5