In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows malicious users to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
graphicsmagick graphicsmagick 1.4 |
||
debian debian linux 8.0 |
||
debian debian linux 9.0 |
||
debian debian linux 10.0 |
||
canonical ubuntu linux 18.04 |