Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27129
HistorySep 21, 2020 - 6:37 a.m.

Arbitrary Code Execution

2020-09-2106:37:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
graphicsmagick
vulnerability
heap overflow
writergbimage
coders
rgb.c
multiple frames
non-identical widths
software

EPSS

0.009

Percentile

82.4%

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical widths.