In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service or information disclosure via a crafted image file.
References
Configurations
History
No history.
Information
Published : 2019-04-08 19:29
Updated : 2024-02-04 20:20
NVD link : CVE-2019-11009
Mitre link : CVE-2019-11009
CVE.ORG link : CVE-2019-11009
JSON object : View
Products Affected
opensuse
- leap
debian
- debian_linux
graphicsmagick
- graphicsmagick
CWE
CWE-125
Out-of-bounds Read