CVE-2016-9830

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.25

Description The issue exists due to insufficient input validation in the MagickRealloc function, allowing a remote attacker to cause a denial of service by crashing the system with large dimensions in a jpeg image.

Recommendations For GraphicsMagick version 1.3.25, consider restricting the processing of jpeg images with large dimensions until a patch is available. As a temporary workaround, avoid using the MagickRealloc function in the memory.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.