CVE-2020-12672
published 2020-05-06CVE-2020-12672: GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | graphicsmagick | < graphicsmagick 1.4+really1.3.35-2 (bookworm) | graphicsmagick 1.4+really1.3.35-2 (bookworm) |
| graphicsmagick | graphicsmagick | <= 1.3.35 | — |
| graphicsmagick | graphicsmagick | >= 0 < 1.4+really1.3.35-2 | 1.4+really1.3.35-2 |
| graphicsmagick | graphicsmagick | >= 0 < 1.4+really1.3.35-2 | 1.4+really1.3.35-2 |
| graphicsmagick | graphicsmagick | >= 0 < 1.4+really1.3.35-2 | 1.4+really1.3.35-2 |
| graphicsmagick | graphicsmagick | >= 0 < 1.4+really1.3.35-2 | 1.4+really1.3.35-2 |
| graphicsmagick | graphicsmagick | >= 0 < 1.4+really1.3.35-1ubuntu0.1 | 1.4+really1.3.35-1ubuntu0.1 |
| graphicsmagick | graphicsmagick | >= 0 < 1.3.18-1ubuntu3.1+esm7 | 1.3.18-1ubuntu3.1+esm7 |
| graphicsmagick | graphicsmagick | >= 0 < 1.3.18-1ubuntu3.1+esm8 | 1.3.18-1ubuntu3.1+esm8 |
| graphicsmagick | graphicsmagick | >= 0 < 1.3.23-1ubuntu0.6+esm1 | 1.3.23-1ubuntu0.6+esm1 |
| graphicsmagick | graphicsmagick | >= 0 < 1.3.23-1ubuntu0.6+esm2 | 1.3.23-1ubuntu0.6+esm2 |
| graphicsmagick | graphicsmagick | >= 0 < 1.3.28-2ubuntu0.1+esm1 | 1.3.28-2ubuntu0.1+esm1 |
| graphicsmagick | graphicsmagick | >= 0 < 1.3.28-2ubuntu0.2+esm1 | 1.3.28-2ubuntu0.2+esm1 |
| graphicsmagick | graphicsmagick | >= 0 < 1.4+really1.3.35-1ubuntu0.1~esm1 | 1.4+really1.3.35-1ubuntu0.1~esm1 |
| opensuse | backports_sle | — | — |
| opensuse | leap | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH