CVE Catalog

CVE-2017-11643

Critical
Published: Translated: NVD NIST

Summary

GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths.

Risk Assessment

Heap overflow may lead to the execution of malicious code, posing a serious security threat to the system.

Recommendation

It is recommended to upgrade to the latest version of GraphicsMagick to mitigate this vulnerability.

Original NVD description (English source)

GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS