CVE-2017-11636

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26

Description The issue is related to a heap overflow in the WriteRGBImage() function, which can be exploited by a remote attacker to cause a denial of service. This occurs when processing multiple frames with non-identical widths.

Recommendations For GraphicsMagick version 1.3.26, consider disabling the WriteRGBImage() function until a patch is available to prevent potential exploitation. Restrict access to the coders/rgb.c module to minimize the risk of denial of service attacks. Avoid using the WriteRGBImage() function for processing multiple frames with different widths until the issue is resolved.