CVE-2016-7997

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.3.25 and earlier

Description The issue is related to the WPG format reader in GraphicsMagick, which allows remote attackers to cause a denial of service. This can be achieved through vectors related to a ReferenceBlob and a NULL pointer, leading to an assertion failure and crash. The vulnerability is associated with a NULL pointer dereference.

Recommendations For GraphicsMagick versions 1.3.25 and earlier, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict the use of the WPG format reader until a patch is available.