CVE-2017-11643

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26

Description The issue is related to a heap overflow in the WriteCMYKImage() function when processing multiple frames with non-identical widths. This can be exploited by a remote attacker to execute arbitrary code in the context of the vulnerable application.

Recommendations For GraphicsMagick version 1.3.26, consider disabling the WriteCMYKImage() function until a patch is available to prevent potential exploitation. Restrict access to the coders/cmyk.c module to minimize the risk of exploitation. Avoid using the WriteCMYKImage() function when processing multiple frames with different widths until the issue is resolved.