CVE-2019-12921

In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for…

published March 18, 2020

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07983 · 94.7th percentile
Published
2020-03-18T17:39Z
EPSS history
Timeline
  • 18 MAR 17:39Z
    In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for…
    cvelistv5