Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2016-8683: GraphicsMagick 1.3.25 can crash on malicious PCX image
CVE-2016-8683 · published 9 years ago
Summary
The PCX image reader in GraphicsMagick version 1.3.25 may fail when it receives a specially crafted PCX picture, causing the program to run out of memory and stop processing the file. This can lead to a denial of service for any system that automatically opens such images. Update to a newer GraphicsMagick release or apply the vendor's patch to avoid the crash.
What to do
- Update debian graphicsmagick to version 1.3.25-5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | graphicsmagick |
< 1.3.25-5 Fix: upgrade to 1.3.25-5
|
| Debian:13 | debian | graphicsmagick |
< 1.3.25-5 Fix: upgrade to 1.3.25-5
|
| Debian:14 | debian | graphicsmagick |
< 1.3.25-5 Fix: upgrade to 1.3.25-5
|
| – | graphicsmagick | graphicsmagick |
1.3.25 cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.25:*:*:*:*:*:*:* |
| – | opensuse | opensuse |
13.2 cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* |
| – | debian | debian_linux |
8.0 cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
Original advisory text
The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file tru...
The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
References
- https://security-tracker.debian.org/tracker/CVE-2016-8683 Vendor Advisory
- http://hg.code.sf.net/p/graphicsmagick/code/rev/b9edafd479b9 Issue Tracking Patch Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html Third Party Advisory
- http://www.debian.org/security/2016/dsa-3746 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/10/16/7 Mailing List Patch Third Party Advisory
- http://www.securityfocus.com/bid/93600 Third Party Advisory VDB Entry
- https://blogs.gentoo.org/ago/2016/09/15/graphicsmagick-memory-allocation-failure... Patch Third Party Advisory VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1385583 Issue Tracking Patch
Severity
7.8
High
Type
CWE-119Buffer Overflow
Timeline
Published15 Feb 2017
Updated3 Nov 2026
First seen22 Sep 2026
Track software like this
Free during beta