GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawI...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 graphicsmagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]

Debian:13 graphicsmagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]

Debian:14 graphicsmagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]

参照URL

advisory security-tracker.debian.org