CVE-2016-8683 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Graphicsmagick

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer9 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.3%
top 47.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
GraphicsmagickDebian GraphicsmagickDebian Linux+1 more
Timeline
PublishedFeb 15
Latest updateMay 14

Description

The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/graphicsmagick< graphicsmagick 1.3.25-5 (bookworm)
▶Debiangraphicsmagick/graphicsmagick< 1.3.25-5+3

Also affects: Debian Linux 8.0

Patches

Patch: hg.code.sf.net ↗Patch: www.openwall.com ↗Patch: blogs.gentoo.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-qx3f-7wjp-2rrr: The ReadPCXImage function in coders/pcx↗2022-05-14
▶
OSV
CVE-2016-8683: The ReadPCXImage function in coders/pcx↗2017-02-15
▶
CVEList
CVE-2016-8683: The ReadPCXImage function in coders/pcx↗2017-02-15
▶

📋Vendor Advisories

1
Debian
CVE-2016-8683: graphicsmagick - The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote...↗2016
▶

💬Community

4
Bugzilla
CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 GraphicsMagick: Multiple security issues↗2016-10-17
▶
Bugzilla
CVE-2016-7800 CVE-2016-7996 CVE-2016-7997 CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 CVE-2016-9830 GraphicsMagick: various flaws [epel-all]↗2016-10-10
▶
Bugzilla
CVE-2016-7800 CVE-2016-7996 CVE-2016-7997 CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 CVE-2016-9830 GraphicsMagick: various flaws [fedora-all]↗2016-10-10
▶
Bugzilla
CVE-2015-8683 libtiff: Out-of-bounds when reading CIE Lab image format files↗2015-12-28
▶