Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

GraphicsMagick can be crashed or hijacked by crafted input

published 4 days ago
Summary

The GraphicsMagick program can run out of memory when it processes certain data, allowing an attacker to cause a crash or potentially run code. This affects any installation of GraphicsMagick older than version 1. To protect your systems, upgrade to the latest GraphicsMagick release or apply the vendor’s patch.

What to do
  • Update cleanstart graphicsmagick to version 1.3.25-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart graphicsmagick < 1.3.25-r0
Fix: upgrade to 1.3.25-r0
Original advisory text
Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1
Security vulnerability affects the graphicsmagick package. Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-XK18346 · OSV
Track software like this
Free during beta