{"id":"CVE-2016-2318","aliases":["DEBIAN-CVE-2016-2318","DLA-484-1","DSA-3746-1","EUVD-2016-3402","GHSA-5mmj-6x72-cg2x","MGASA-2016-0252","SUSE-SU-2016:1783-1","UBUNTU-CVE-2016-2318"],"status":"published","title":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer...","description":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01879,"percentile":0.79586,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2016-05-21T00:00:00Z","modified":"2026-09-22T07:01:49Z","fixes":[{"ecosystem":"Debian:12","package":"graphicsmagick","fixed_in":["1.3.24-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphicsmagick","fixed_in":["1.3.24-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphicsmagick","fixed_in":["1.3.24-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"graphicsmagick","fixed_in":["1.3.18-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","fixed_in":["1.3.23-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.16-1.1+deb7u1"}]}],"versions":["1.3.16-1.1"],"bundled":9},{"source":"osv","ecosystem":"Debian:8","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.20-3+deb8u2"}]}],"versions":["1.3.20-3+deb8u1"],"bundled":14},{"source":"osv","ecosystem":"Mageia:5","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1.2.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"gnudl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.5-2.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"octave","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-3.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"pdf2djvu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-4.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"photoqt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-4.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.41.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.41.1"}]}],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.18-1ubuntu3.1"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.1"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"graphicsmagick","product":"graphicsmagick"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"suse","product":"linux_enterprise_debuginfo"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"},{"vendor":"suse","product":"studio_onsite"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306148","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/31/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/83241","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/27/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3746","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/18/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/11/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/07/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2318"},{"url":"https://github.com/advisories/GHSA-5mmj-6x72-cg2x"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-2318","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0252.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17714","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/05/01/6","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/02/06/3","tags":["web"]},{"url":"http://lwn.net/Vulnerabilities/677107/","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/05/30/1","tags":["web"]},{"url":"http://www.graphicsmagick.org/NEWS.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161783-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/965853","tags":["report"]},{"url":"https://bugzilla.suse.com/983234","tags":["report"]},{"url":"https://bugzilla.suse.com/983259","tags":["report"]},{"url":"https://bugzilla.suse.com/983309","tags":["report"]},{"url":"https://bugzilla.suse.com/983455","tags":["report"]},{"url":"https://bugzilla.suse.com/983521","tags":["report"]},{"url":"https://bugzilla.suse.com/983523","tags":["report"]},{"url":"https://bugzilla.suse.com/983533","tags":["report"]},{"url":"https://bugzilla.suse.com/983752","tags":["report"]},{"url":"https://bugzilla.suse.com/983794","tags":["report"]},{"url":"https://bugzilla.suse.com/983796","tags":["report"]},{"url":"https://bugzilla.suse.com/983799","tags":["report"]},{"url":"https://bugzilla.suse.com/983803","tags":["report"]},{"url":"https://bugzilla.suse.com/984028","tags":["report"]},{"url":"https://bugzilla.suse.com/984032","tags":["report"]},{"url":"https://bugzilla.suse.com/984035","tags":["report"]},{"url":"https://bugzilla.suse.com/984135","tags":["report"]},{"url":"https://bugzilla.suse.com/984142","tags":["report"]},{"url":"https://bugzilla.suse.com/984144","tags":["report"]},{"url":"https://bugzilla.suse.com/984145","tags":["report"]},{"url":"https://bugzilla.suse.com/984150","tags":["report"]},{"url":"https://bugzilla.suse.com/984166","tags":["report"]},{"url":"https://bugzilla.suse.com/984181","tags":["report"]},{"url":"https://bugzilla.suse.com/984193","tags":["report"]},{"url":"https://bugzilla.suse.com/984372","tags":["report"]},{"url":"https://bugzilla.suse.com/984373","tags":["report"]},{"url":"https://bugzilla.suse.com/984375","tags":["report"]},{"url":"https://bugzilla.suse.com/984379","tags":["report"]},{"url":"https://bugzilla.suse.com/984394","tags":["report"]},{"url":"https://bugzilla.suse.com/984398","tags":["report"]},{"url":"https://bugzilla.suse.com/984400","tags":["report"]},{"url":"https://bugzilla.suse.com/984408","tags":["report"]},{"url":"https://bugzilla.suse.com/984409","tags":["report"]},{"url":"https://bugzilla.suse.com/984433","tags":["report"]},{"url":"https://bugzilla.suse.com/984436","tags":["report"]},{"url":"https://bugzilla.suse.com/985442","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5688","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-2318","tags":["report"]},{"url":"http://seclists.org/oss-sec/2016/q1/297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2318","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-2318","description":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.","status":"published","published":"2017-02-03T15:00:00Z","modified":"2024-08-05T23:24:48.94Z","updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-3402","description":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.","status":"published","published":"2017-02-03T15:00:00Z","modified":"2024-08-05T23:24:48Z","updated_at":"2026-11-03T02:22:53.601545Z"}],"ghsa":[{"id":"GHSA-5mmj-6x72-cg2x","title":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer...","description":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.","status":"published","published":"2022-05-14T02:05:03Z","modified":"2023-02-02T05:05:21Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:52:04.117158Z"}],"nvd":[{"id":"CVE-2016-2318","description":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.","status":"published","published":"2017-02-03T15:59:00.227Z","modified":"2026-06-17T00:43:49.143Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:03:35.029632Z"}],"osv":[{"id":"CVE-2016-2318","description":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.","status":"published","published":"2017-02-03T15:59:00.227Z","modified":"2026-04-16T06:21:04.957051589Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-2318","description":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.","status":"published","published":"2017-02-03T15:59:00.227Z","modified":"2026-09-22T07:01:49.556780633Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-2318","description":"GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.","status":"published","published":"2017-02-03T15:59:00Z","modified":"2026-04-22T10:36:58.200518Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"DLA-484-1","title":"graphicsmagick - security update","status":"published","published":"2016-05-21T00:00:00Z","modified":"2026-03-09T02:11:32.071534Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3746-1","title":"graphicsmagick - security update","status":"published","published":"2016-12-24T00:00:00Z","modified":"2026-03-09T01:19:29.494609Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0252","title":"Updated graphicsmagick packages fix security vulnerability","description":"- A read out-of-bound in the parsing of gif files using GraphicsMagick\n  (CVE-2015-8808).\n\n- Infinite loop caused by converting a circularly defined svg file\n  (CVE-2016-5240).\n\n- Fix another case of CVE-2016-2317 (heap buffer overflow) in the MVG\n  rendering code (also impacts SVG).\n\n- arithmetic exception converting a svg file (CVE-2016-5241)\n\n- Arithmetic exception converting a svg file caused by a X%0 operation in\n  magick/render.c (CVE-2016-2318)\n\n- A shell exploit (CVE-2016-5118) was discovered associated with a\n  filename syntax where file names starting with '|' are intepreted as\n  shell commands executed via popen(). Insufficient sanitization in the\n  SVG and MVG renderers allows such filenames to be passed through from\n  potentially untrusted files. There might be other ways for untrusted\n  inputs to produce such filenames. Due to this issue, support for the\n  feature is removed entirely.\n\nThe gnudl, octave, pdf2djvu, and photoqt packages have been rebuilt to use\nthe updated GraphicsMagick++ library.\n","status":"published","published":"2016-07-14T20:33:59Z","modified":"2026-04-16T06:24:21.615738427Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2016:1783-1","title":"Security update for GraphicsMagick","description":"GraphicsMagick was updated to fix 37 security issues.\n\nThese security issues were fixed:\n- CVE-2014-9810: SEGV in dpx file handler (bsc#983803).\n- CVE-2014-9811: Crash in xwd file handler (bsc#984032).\n- CVE-2014-9813: Crash on corrupted viff file (bsc#984035).\n- CVE-2014-9814: NULL pointer dereference in wpg file handling (bsc#984193).\n- CVE-2014-9815: Crash on corrupted wpg file (bsc#984372).\n- CVE-2014-9816: Out of bound access in viff image (bsc#984398).\n- CVE-2014-9817: Heap buffer overflow in pdb file handling (bsc#984400).\n- CVE-2014-9818: Out of bound access on malformed sun file (bsc#984181).\n- CVE-2014-9819: Heap overflow in palm files (bsc#984142).\n- CVE-2014-9830: Handling of corrupted sun file (bsc#984135).\n- CVE-2014-9831: Handling of corrupted wpg file (bsc#984375).\n- CVE-2014-9837: Additional PNM sanity checks (bsc#984166).\n- CVE-2014-9834: Heap overflow in pict file (bsc#984436).\n- CVE-2014-9853: Memory leak in rle file handling (bsc#984408).\n- CVE-2015-8903: Denial of service (cpu) in vicar (bsc#983259).\n- CVE-2015-8901: MIFF file DoS (endless loop) (bsc#983234).\n- CVE-2016-5688: Various invalid memory reads in ImageMagick WPG (bsc#985442).\n- CVE-2015-8894: Double free in coders/tga.c:221 (bsc#983523).\n- CVE-2015-8896: Double free / integer truncation issue in coders/pict.c:2000 (bsc#983533).\n- CVE-2014-9807: Double free in pdb coder. (bsc#983794).\n- CVE-2014-9828: Corrupted (too many colors) psd file (bsc#984028).\n- CVE-2014-9805: SEGV due to a corrupted pnm file (bsc#983752).\n- CVE-2014-9808: SEGV due to corrupted dpc images (bsc#983796).\n- CVE-2014-9820: Heap overflow in xpm files (bsc#984150).\n- CVE-2014-9839: Theoretical out of bound access in magick/colormap-private.h (bsc#984379).\n- CVE-2014-9809: SEGV due to corrupted xwd images. (bsc#983799).\n- CVE-2016-5240: SVG converting issue resulting in DoS (endless loop) (bsc#983309).\n- CVE-2014-9840: Out of bound access in palm file (bsc#984433).\n- CVE-2014-9847: Incorrect handling of 'previous' image in the JNG decoder (bsc#984144).\n- CVE-2016-5241: Arithmetic exception (div by 0) in SVG conversion (bsc#983455).\n- CVE-2014-9845: Crash due to corrupted dib file (bsc#984394).\n- CVE-2014-9844: Out of bound issue in rle file (bsc#984373).\n- CVE-2014-9835: Heap overflow in wpf file (bsc#984145).\n- CVE-2014-9829: Out of bound access in sun file (bsc#984409).\n- CVE-2014-9846: Added checks to prevent overflow in rle file. (bsc#983521).\n- CVE-2016-2317: Multiple vulnerabilities when parsing and processing SVG files (bsc#965853).\n- CVE-2016-2318: Multiple vulnerabilities when parsing and processing SVG files (bsc#965853).\n","status":"published","published":"2016-07-11T10:12:26Z","modified":"2026-02-04T03:50:32.243508Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}