CVE-2016-7996

Critical

Published: 18/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries.

Risk Assessment

Attackers may exploit this vulnerability to execute remote code or destabilize the system, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to update GraphicsMagick to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries.