CVE-2017-14314

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26

Description The issue is related to an off-by-one error in the DrawImage function, which can cause a denial of service due to a heap-based buffer over-read and application crash. This can be triggered by a remote attacker using a crafted file. The error is associated with a buffer overflow vulnerability in the DrawImage function.

Recommendations For GraphicsMagick version 1.3.26, consider updating to a newer version that addresses the off-by-one error in the DrawImage function to prevent the denial of service and buffer over-read issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.