{"id":"CVE-2019-19953","aliases":["DEBIAN-CVE-2019-19953","DLA-2084-1","DSA-4640-1","EUVD-2019-9541","GHSA-vw6h-rrf4-86pm","MGASA-2020-0102","UBUNTU-CVE-2019-19953","USN-5190-1","openSUSE-SU-2020:0055-1","openSUSE-SU-2020:0145-1"],"status":"published","title":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the...","description":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02439,"percentile":0.84405,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2019-12-24T00:06:51Z","modified":"2026-09-21T07:03:16Z","fixes":[{"ecosystem":"Debian:12","package":"graphicsmagick","fixed_in":["1.4+really1.3.34-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphicsmagick","fixed_in":["1.4+really1.3.34-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphicsmagick","fixed_in":["1.4+really1.3.34-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","fixed_in":["1.3.18-1ubuntu3.1+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"graphicsmagick","fixed_in":["1.3.23-1ubuntu0.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"graphicsmagick","fixed_in":["1.3.28-2ubuntu0.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4+really1.3.34-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4+really1.3.34-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4+really1.3.34-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.20-3+deb8u8"}]}],"versions":["1.3.20-3+deb8u1","1.3.20-3+deb8u2","1.3.20-3+deb8u3","1.3.20-3+deb8u4","1.3.20-3+deb8u5","1.3.20-3+deb8u6","1.3.20-3+deb8u7"],"bundled":3},{"source":"osv","ecosystem":"Debian:9","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.30+hg15796-1~deb9u3"}]}],"versions":["1.3.25-8","1.3.26-1","1.3.26-10","1.3.26-11","1.3.26-12","1.3.26-13","1.3.26-14","1.3.26-15","1.3.26-16","1.3.26-17","1.3.26-18","1.3.26-19","1.3.26-2","1.3.26-3","1.3.26-4","1.3.26-5","1.3.26-6","1.3.26-7","1.3.26-8","1.3.26-9","1.3.27-1","1.3.27-2","1.3.27-3","1.3.27-4","1.3.28-1","1.3.28-2","1.3.29+hg15665-1","1.3.29-1","1.3.30+hg15796-1~deb9u1","1.3.30+hg15796-1~deb9u2","1.3.30-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4~hg15978-1+deb10u1"}]}],"versions":["1.4~hg15978-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:7","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.35-1.mga7"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.18-1ubuntu3.1+esm7"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3","1.3.18-1ubuntu3.1","1.3.18-1ubuntu3.1+esm1","1.3.18-1ubuntu3.1+esm2","1.3.18-1ubuntu3.1+esm3","1.3.18-1ubuntu3.1+esm4","1.3.18-1ubuntu3.1+esm5","1.3.18-1ubuntu3.1+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.6+esm1"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1","1.3.23-1ubuntu0.1+esm1","1.3.23-1ubuntu0.2","1.3.23-1ubuntu0.3","1.3.23-1ubuntu0.4","1.3.23-1ubuntu0.5","1.3.23-1ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.28-2ubuntu0.1+esm1"}]}],"versions":["1.3.26-15","1.3.26-16","1.3.26-19","1.3.27-1","1.3.27-2","1.3.27-3","1.3.28-1","1.3.28-2","1.3.28-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.18-1ubuntu3.1+esm7"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3","1.3.18-1ubuntu3.1","1.3.18-1ubuntu3.1+esm1","1.3.18-1ubuntu3.1+esm2","1.3.18-1ubuntu3.1+esm3","1.3.18-1ubuntu3.1+esm4","1.3.18-1ubuntu3.1+esm5","1.3.18-1ubuntu3.1+esm6"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.6+esm1"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1","1.3.23-1ubuntu0.1+esm1","1.3.23-1ubuntu0.2","1.3.23-1ubuntu0.3","1.3.23-1ubuntu0.4","1.3.23-1ubuntu0.5","1.3.23-1ubuntu0.6"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.28-2ubuntu0.1+esm1"}]}],"versions":["1.3.26-15","1.3.26-16","1.3.26-19","1.3.27-1","1.3.27-2","1.3.27-3","1.3.28-1","1.3.28-2","1.3.28-2ubuntu0.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4+really1.3.35-1ubuntu0.1~esm1"}]}],"versions":["1.4+really1.3.33+hg16115-1","1.4+really1.3.33+hg16115-1build1","1.4+really1.3.33+hg16117-1","1.4+really1.3.34-1","1.4+really1.3.34-2","1.4+really1.3.34+hg16181-1","1.4+really1.3.35-1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-lp151.4.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-bp151.5.9.1"}]}],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"graphicsmagick","product":"graphicsmagick"},{"vendor":"opensuse","product":"backports"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://sourceforge.net/p/graphicsmagick/bugs/617/","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/28f8bacd4bbf","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Vendor Advisory","fix","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00064.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/01/msg00029.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4640","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19953"},{"url":"https://github.com/advisories/GHSA-vw6h-rrf4-86pm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-19953","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0102.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26094","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2084","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2020-01/msg00057.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-19953","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5190-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-12672","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WOTKEK3CX2ISI5JBIT4J3NWCZ2KC4GHL/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1159852","tags":["report"]},{"url":"https://bugzilla.suse.com/1160321","tags":["report"]},{"url":"https://bugzilla.suse.com/1160364","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19953","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXH777IOYCATVGWBIW4VNUTD62RMTZ4W/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-19953","description":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.","status":"published","published":"2019-12-24T00:06:51Z","modified":"2024-08-05T02:32:10.039Z","updated_at":"2026-11-02T14:20:20.74896Z"}],"euvd":[{"id":"EUVD-2019-9541","description":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.","status":"published","published":"2019-12-24T00:06:51Z","modified":"2024-08-05T02:32:10Z","updated_at":"2026-11-03T02:40:23.251012Z"}],"ghsa":[{"id":"GHSA-vw6h-rrf4-86pm","title":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the...","description":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.","status":"published","published":"2022-05-24T17:05:00Z","modified":"2023-01-30T05:01:09Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:46:20.638842Z"}],"nvd":[{"id":"CVE-2019-19953","description":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.","status":"published","published":"2019-12-24T01:15:11.59Z","modified":"2026-06-17T02:27:30.41Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:40.856496Z"}],"osv":[{"id":"CVE-2019-19953","description":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.","status":"published","published":"2019-12-24T01:15:11.59Z","modified":"2026-04-16T04:34:39.135258978Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-19953","description":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.","status":"published","published":"2019-12-24T01:15:11.59Z","modified":"2026-09-21T07:03:16.858001532Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"UBUNTU-CVE-2019-19953","description":"In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.","status":"published","published":"2019-12-24T01:15:00Z","modified":"2026-04-22T12:16:25.426369Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"DLA-2084-1","title":"graphicsmagick - security update","status":"published","published":"2020-01-29T00:00:00Z","modified":"2026-03-09T01:18:38.776847Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4640-1","title":"graphicsmagick - security update","status":"published","published":"2020-03-15T00:00:00Z","modified":"2026-03-09T02:10:15.237412Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0102","title":"Updated graphicsmagick packages fix security vulnerabilities","description":"Updated graphicsmagick packages fix security vulnerabilities:\n\nFixed a use-after-free in ThrowException and ThrowLoggedException of\nmagick/error.c (CVE-2019-19950).\n\nFixed a heap-based buffer overflow in ImportRLEPixels() (CVE-2019-19951).\n\nFixed a heap-based buffer overflow in EncodeImage() (CVE-2019-19953).\n","status":"published","published":"2020-02-26T10:21:01Z","modified":"2026-04-16T04:41:17.36506078Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0055-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following issues:\n\n- CVE-2019-19950: Fixed a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. (boo#1159852)\n- CVE-2019-19951: Fixed a heap-based buffer overflow in ImportRLEPixels() (boo#1160321).\n- CVE-2019-19953: Fixed a heap-based buffer overflow in EncodeImage() (boo#1160364).\n","status":"published","published":"2020-01-14T17:16:22Z","modified":"2025-05-07T18:10:58.193957Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0145-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following issues:\n\n- CVE-2019-19950: Fixed a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. (boo#1159852)\n- CVE-2019-19951: Fixed a heap-based buffer overflow in ImportRLEPixels() (boo#1160321).\n- CVE-2019-19953: Fixed a heap-based buffer overflow in EncodeImage() (boo#1160364).\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-01-29T16:49:44Z","modified":"2026-02-04T02:59:30.943423Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"USN-5190-1","title":"graphicsmagick vulnerabilities","description":"It was discovered that GraphicsMagick allowed reading arbitrary files via\nspecially crafted images. An attacker could use this issue to expose sensitive\ninformation. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and\nUbuntu 18.04 ESM. (CVE-2019-12921)\n\nIt was discovered that GraphicsMagick did not correctly handle memory\nallocations for error messages. An attacker could use this issue to corrupt\nmemory or possibly execute arbitrary code. This issue only affects Ubuntu 14.04\nESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-19950)\n\nIt was discovered that GraphicsMagick did not correctly handle type limits.\nAn attacker could use these issues to cause heap-based buffer overflows,\nleading to a denial of service (application crash) or possibly execute\narbitrary code. These issues only affect Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and\nUbuntu 18.04 ESM. (CVE-2019-19951, CVE-2019-19953)\n\nIt was discovered that GraphicsMagick did not correctly handle the signed\ninteger limit in 32-bit applications. An attacker could use this issue to cause\na heap-based buffer overflow, leading to a denial of service (application crash)\nor possibly execute arbitrary code. This issue only affects Ubuntu 14.04 ESM,\nUbuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2020-10938)\n\nIt was discovered that GraphicsMagick did not properly magnify certain\nimages. An attacker could use this issue to cause a heap-based buffer\noverflow, leading to a denial of service (application crash) or possibly\nexecute arbitrary code. (CVE-2020-12672)\n","status":"published","published":"2022-08-30T16:03:50Z","modified":"2026-06-29T13:49:35.07753545Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}