CVE-2012-3438
Fixed in a distro release EPSS 2%
The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.
Products: graphicsmagick
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | graphicsmagick | 1.3.16-1.1 |
| Debian 13 | graphicsmagick | 1.3.16-1.1 |
| Debian 14 | graphicsmagick | 1.3.16-1.1 |
| openSUSE Tumbleweed | GraphicsMagick | 1.3.25-1.1 |