Loading
Generated remediation guidance and an executive summary. No account required.
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.
Use CWE-119, Graphicsmagick vendor hub and Graphicsmagick product page to widen CVE-2017-16352 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2020-10938, CVE-2019-19951 and CVE-2019-19950 for nearby disclosures in the same product family.