[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKPZo1jAKDAl-yxmrOFhVkPSVcZN5Saru20jnbKoIwzU":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":81,"topProductsByCves":82,"seoMetadata":84,"meta":93},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},12705,"graphicsmagick",1,118,0,71,"2023-08-22","g",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},51726,"Graphicsmagick is a technology vendor with 1 tracked product and 118 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,37,42,47,54,59,66,70,75],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2016-5118","The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","2016-06-10",9.8,"v3.1","Critical",false,0.49982,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":36},"CVE-2017-14103","The ReadJNGImage and ReadOneJNGImage functions in coders\u002Fpng.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11403.","2017-09-01",8.8,"v3.0","High",0.30248,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":41},"CVE-2017-11403","The ReadMNGImage function in coders\u002Fpng.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.","2017-07-18",0.2831,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":46},"CVE-2017-12936","The ReadWMFImage function in coders\u002Fwmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.","2017-08-18",0.25065,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":34,"severity":52,"isKev":27,"epssScore":53},"CVE-2017-15277","ReadGIFImage in coders\u002Fgif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.","2017-10-12",6.5,"Medium",0.19193,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":58},"CVE-2017-16352","GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the \"Display visual image directory\" feature of the DescribeImage() function of the magick\u002Fdescribe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.","2017-11-01",0.14512,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":52,"isKev":27,"epssScore":65},"CVE-2005-1275","Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.","2005-04-25",5,"v2",0.13919,{"cveId":67,"description":68,"publishedDate":57,"cvssScore":51,"cvssVersion":34,"severity":52,"isKev":27,"epssScore":69},"CVE-2017-16353","GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick\u002Fdescribe.c file, because of a heap-based buffer over-read. The portion of the code containing the vulnerability is responsible for printing the IPTC Profile information contained in the image. This vulnerability can be triggered with a specially crafted MIFF file. There is an out-of-bounds buffer dereference because certain increments are never checked.",0.13679,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":51,"cvssVersion":25,"severity":52,"isKev":27,"epssScore":74},"CVE-2019-12921","In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG.","2020-03-18",0.08005,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":64,"severity":26,"isKev":27,"epssScore":80},"CVE-2008-6071","Heap-based buffer overflow in the DecodeImage function in coders\u002Fpict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PICT image.  NOTE: some of these details are obtained from third party information.","2009-02-10",10,0.06654,[],[83],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Graphicsmagick - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Graphicsmagick covering 1 product with 118 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Graphicsmagick vulnerabilities, Graphicsmagick security, Graphicsmagick CVE, Graphicsmagick threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":89,"@type":90,"name":91,"description":86,"url":92},"https:\u002F\u002Fschema.org","Organization","Graphicsmagick","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fgraphicsmagick",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":94,"apiVersion":95},"2026-10-17T18:10:32.407Z","3.0"]