{"id":"CVE-2017-12936","aliases":["ALPINE-CVE-2017-12936","DEBIAN-CVE-2017-12936","DLA-1082-1","DLA-1456-1","DSA-4321-1","EUVD-2017-4460","GHSA-2xwm-j535-wh92","MGASA-2017-0297","SUSE-SU-2017:3056-1","UBUNTU-CVE-2017-12936","USN-4222-1"],"status":"published","title":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for...","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.25065,"percentile":0.97937,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2017-08-18T12:00:00Z","modified":"2026-11-03T06:30:02Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"graphicsmagick","fixed_in":["1.3.26-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"graphicsmagick","fixed_in":["1.3.26-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphicsmagick","fixed_in":["1.3.26-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphicsmagick","fixed_in":["1.3.26-6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","fixed_in":["1.3.18-1ubuntu3.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","fixed_in":["1.3.23-1ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-6"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.16-1.1+deb7u9"}]}],"versions":["1.3.16-1.1","1.3.16-1.1+deb7u1","1.3.16-1.1+deb7u2","1.3.16-1.1+deb7u3","1.3.16-1.1+deb7u4","1.3.16-1.1+deb7u5","1.3.16-1.1+deb7u6","1.3.16-1.1+deb7u7","1.3.16-1.1+deb7u8"],"bundled":8},{"source":"osv","ecosystem":"Debian:8","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.20-3+deb8u4"}]}],"versions":["1.3.20-3+deb8u1","1.3.20-3+deb8u2","1.3.20-3+deb8u3"],"bundled":31},{"source":"osv","ecosystem":"Debian:9","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.30+hg15796-1~deb9u1"}]}],"versions":["1.3.25-8","1.3.26-1","1.3.26-10","1.3.26-11","1.3.26-12","1.3.26-13","1.3.26-14","1.3.26-15","1.3.26-16","1.3.26-17","1.3.26-18","1.3.26-19","1.3.26-2","1.3.26-3","1.3.26-4","1.3.26-5","1.3.26-6","1.3.26-7","1.3.26-8","1.3.26-9","1.3.27-1","1.3.27-2","1.3.27-3","1.3.27-4","1.3.28-1","1.3.28-2","1.3.29+hg15665-1","1.3.29-1","1.3.30-1"],"bundled":56},{"source":"osv","ecosystem":"Mageia:5","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-1.2.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:6","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.26-1.3.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.78.16.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.78.16.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.18-1ubuntu3.1+esm3"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3","1.3.18-1ubuntu3.1","1.3.18-1ubuntu3.1+esm1","1.3.18-1ubuntu3.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.3"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1","1.3.23-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.3"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1","1.3.23-1ubuntu0.2"],"bundled":15}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"graphicsmagick","product":"graphicsmagick"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4321","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://hg.code.sf.net/p/graphicsmagick/code/rev/be898b7c97bd","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-use-after-free-in-readwmfimage-wmf-c/","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4222-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12936"},{"url":"https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-use-after-free-in-readwmfimage-wmf-c"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ"},{"url":"https://usn.ubuntu.com/4222-1"},{"url":"https://github.com/advisories/GHSA-2xwm-j535-wh92"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-12936","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-12936","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0297.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21564","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2017/08/18/4","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2017/08/18/3","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2017/08/18/5","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173056-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050135","tags":["report"]},{"url":"https://bugzilla.suse.com/1054596","tags":["report"]},{"url":"https://bugzilla.suse.com/1054598","tags":["report"]},{"url":"https://bugzilla.suse.com/1055042","tags":["report"]},{"url":"https://bugzilla.suse.com/1055050","tags":["report"]},{"url":"https://bugzilla.suse.com/1055430","tags":["report"]},{"url":"https://bugzilla.suse.com/1061873","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15033","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-12936","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2017/08/18/3","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4222-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11642","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13777","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-12936","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","status":"published","published":"2017-08-18T12:00:00Z","modified":"2024-08-05T18:51:07.314Z","updated_at":"2026-11-02T14:33:17.264801Z"}],"euvd":[{"id":"EUVD-2017-4460","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","status":"published","published":"2017-08-18T12:00:00Z","modified":"2024-08-05T18:51:07Z","updated_at":"2026-11-03T02:23:20.155596Z"}],"ghsa":[{"id":"GHSA-2xwm-j535-wh92","title":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for...","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","status":"published","published":"2022-05-14T00:57:21Z","modified":"2025-04-20T03:43:16Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:01:50.044707Z"}],"nvd":[{"id":"CVE-2017-12936","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","status":"published","published":"2017-08-18T12:29:00.247Z","modified":"2026-06-17T01:04:10.223Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:03:57.82609Z"}],"osv":[{"id":"ALPINE-CVE-2017-12936","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","status":"published","published":"2017-08-18T12:29:00.247Z","modified":"2026-11-03T06:30:02.339652037Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T06:41:39.834803Z"},{"id":"CVE-2017-12936","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","status":"published","published":"2017-08-18T12:29:00.247Z","modified":"2026-04-16T06:21:27.697526667Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-12936","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","status":"published","published":"2017-08-18T12:29:00.247Z","modified":"2026-09-01T20:03:42.64724831Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"UBUNTU-CVE-2017-12936","description":"The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","status":"published","published":"2017-08-18T12:29:00Z","modified":"2026-04-22T11:13:39.887891Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"DLA-1082-1","title":"graphicsmagick - security update","status":"published","published":"2017-08-31T00:00:00Z","modified":"2026-03-09T01:02:03.864953Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1456-1","title":"graphicsmagick - security update","status":"published","published":"2018-08-02T00:00:00Z","modified":"2026-03-09T01:01:52.904399Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4321-1","title":"graphicsmagick - security update","status":"published","published":"2018-10-16T00:00:00Z","modified":"2026-03-09T02:11:06.805314Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2017-0297","title":"Updated graphicsmagick packages fix security vulnerability","description":"Invalid memory read in SetImageColorCallBack() in image.c\n(CVE-2017-12935).\n\nUse-after-free in ReadWMFImage() in wmf.c (CVE-2017-12936).\n\nHeap-based buffer overflow in ReadSUNImage() in sun.c (CVE-2017-12937).\n","status":"published","published":"2017-08-23T15:43:04Z","modified":"2026-04-16T06:25:19.410163572Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2017:3056-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following issues:\n\n- CVE-2017-15033: A denial of service attack (memory leak) in ReadYUVImage in coders/yuv.c was fixed (bsc#1061873)\n- CVE-2017-13063: A heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c was fixed (bsc#1055050)\n- CVE-2017-13064: A heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c was fixed (bsc#1055042)\n- CVE-2017-12936: The ReadWMFImage function in coders/wmf.c in GraphicsMagick had a use-after-free issue for data associated with exception reporting.  (bsc#1054598)\n- CVE-2017-13139: The ReadOneMNGImage function in coders/png.c had an out-of-bounds read with the MNG CLIP chunk.  (bsc#1055430)\n- CVE-2017-12937: The ReadSUNImage function in coders/sun.c in GraphicsMagick had a colormap heap-based buffer over-read.  (bsc#1054596)\n- CVE-2017-11534: A Memory Leak in the lite_font_map() function in coders/wmf.c was fixed (bsc#1050135)\n\n","status":"published","published":"2017-11-23T16:15:37Z","modified":"2026-02-04T03:28:06.280287Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-4222-1","title":"graphicsmagick vulnerabilities","description":"It was discovered that GraphicsMagick incorrectly handled certain image files.\nAn attacker could possibly use this issue to cause a denial of service or other\nunspecified impact.\n","status":"published","published":"2019-12-16T16:37:05Z","modified":"2026-04-22T09:50:59.188399Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}