CVE-2017-17912

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data…

published December 26, 2017

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01811 · 78.5th percentile
Published
2017-12-26T20:00Z
EPSS history
Timeline
  • 26 DEC 20:00Z
    In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data…
    cvelistv5