Know every vulnerabilitybefore it knows you.
DevGuard continuously monitors your dependencies and alerts you when CVEs like this one affect your stack — with real-time threat intelligence built for developers.
DLA-1456-1
No affected components available
graphicsmagick - security update
Measures severity based on intrinsic characteristics of the vulnerability, independent of environment.
No exploitation activity has been observed at this time. Continue routine monitoring.
The exploit probability is low. The vulnerability is unlikely to be exploited in the next 30 days.
We did not find any exploit available. Neither in GitHub repositories nor in the Exploit-Database.
- CVE-2016-5239Upstream
- CVE-2017-11102Upstream
- CVE-2017-11140Upstream
- CVE-2017-11403Upstream
- CVE-2017-11637Upstream
- CVE-2017-11638Upstream
- CVE-2017-11641Upstream
- CVE-2017-11642Upstream
- CVE-2017-12935Upstream
- CVE-2017-12936Upstream
- CVE-2017-13737Upstream
- CVE-2017-13775Upstream
- CVE-2017-13776Upstream
- CVE-2017-13777Upstream
- CVE-2017-14504Upstream
- CVE-2017-14994Upstream
- CVE-2017-14997Upstream
- CVE-2017-15277
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.
UpstreamEPSS 19.2% - CVE-2017-15930Upstream
- CVE-2017-16352Upstream
- CVE-2017-16547Upstream
- CVE-2017-18219Upstream
- CVE-2017-18220Upstream
- CVE-2017-18229Upstream
- CVE-2017-18230Upstream
- CVE-2017-18231Upstream
- CVE-2017-6335Upstream
- CVE-2017-9098
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.
UpstreamEPSS 3.6% - CVE-2018-5685Upstream
- CVE-2018-6799Upstream
- CVE-2018-9018Upstream
- EUVD-2016-6190Upstream
- EUVD-2017-15396Upstream
- EUVD-2017-18036Upstream
- EUVD-2017-2739Upstream
- EUVD-2017-2775Upstream
- EUVD-2017-3030Upstream
- EUVD-2017-3249Upstream
- EUVD-2017-3250Upstream
- EUVD-2017-3253Upstream
- EUVD-2017-3254Upstream
- EUVD-2017-4459Upstream
- EUVD-2017-4460Upstream
- EUVD-2017-5254Upstream
- EUVD-2017-5290Upstream
- EUVD-2017-5291Upstream
- EUVD-2017-5292Upstream
- EUVD-2017-6006Upstream
- EUVD-2017-6470Upstream
- EUVD-2017-6473Upstream
- EUVD-2017-6737Upstream
- EUVD-2017-7346Upstream
- EUVD-2017-7547Upstream
- EUVD-2017-7740Upstream
- EUVD-2017-9351Upstream
- EUVD-2017-9352Upstream
- EUVD-2017-9361Upstream
- EUVD-2017-9362Upstream
- EUVD-2017-9363Upstream
- EUVD-2018-17454Upstream
- EUVD-2018-18546Upstream
- EUVD-2018-20623Upstream
Continuously monitor your dependencies and get alerted when vulnerabilities like this one affect your stack.
Checkout DevGuard