Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27060
HistorySep 21, 2020 - 6:33 a.m.

Arbitrary Code Execution

2020-09-2106:33:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.003

Percentile

70.5%

GraphicsMagick is vulnerable to arbitrary code execution. An allocation failure vulnerability in the function ReadMNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS via a small MNG file that has a MEND chunk with a large length value.