NetSight
IP …
high8.8

CVE-2019-11505

In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which al…

Impact

In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to MagickBitStreamMSBWrite in magick/bit_stream.c.

Affected products

VendorProductAffected versions
GraphicsmagickGraphicsmagick
from 1.3.8 through 1.3.31
DebianDebian Linux
Versions 8.0, 9.0, 10.0
CanonicalUbuntu Linux
Version 18.04
OpensuseBackports Sle
Version 15.0
OpensuseLeap
Versions 15.0, 15.1, 42.3

Weakness classification

CWE-787

References