In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DLA-1619-1 | graphicsmagick security update |
![]() |
DSA-4640-1 | graphicsmagick security update |
![]() |
EUVD-2018-12752 | In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits. |
![]() |
USN-4207-1 | GraphicsMagick vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T11:58:18.146Z
Reserved: 2018-12-17T00:00:00
Link: CVE-2018-20185

No data.

Status : Modified
Published: 2018-12-17T19:29:03.720
Modified: 2024-11-21T04:01:02.587
Link: CVE-2018-20185

No data.

No data.