CVE-2016-7446

Critical

Published: 06/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. This vulnerability exists due to an incomplete patch for CVE-2016-2317.

Risk Assessment

This vulnerability may lead to unauthorized access or execution of malicious code, posing a serious threat to the security of systems using GraphicsMagick.

Recommendation

It is recommended to upgrade to the latest version of GraphicsMagick to eliminate this vulnerability and any other known security issues.

Original NVD description (English source)

Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.