GraphicsMagick is prone to multiple denial-of-service vulnerabilities.
Attackers can exploit these issues to cause denial-of-service conditions.
GraphicsMagick 1.3.26 is vulnerable; other versions may also be affected.
Information
Exploit
The researcher has created a proof-of-concept to demonstrate these issues. Please see the references for more information.
References:
- #438 heap use after free in CloseBlob (Graphicsmagick)
- Attempt to fix Issue 440. (Graphicsmagick)
- GraphicsMagick Homepage (GraphicsMagick)