CVE-2018-20184

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions 1.4 snapshot-20181209 Q8

Description: The issue is related to a heap-based buffer overflow in the WriteTGAImage function, which can be exploited by attackers to cause a denial of service. This can be achieved by using a specially crafted image file, where the number of rows or columns exceeds the pixel-dimension restrictions of the TGA specification.

Recommendations: For GraphicsMagick version 1.4 snapshot-20181209 Q8, consider disabling the WriteTGAImage function until a patch is available to prevent potential exploitation. Additionally, restrict the use of the TGA image format to minimize the risk of a denial of service attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.