CVE-2017-15930

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26

Description The issue is related to a Null Pointer Dereference in the ReadOneJNGImage function, located in coders/png.c, which can occur while transferring JPEG scanlines. This is connected to a PixelPacket pointer. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For GraphicsMagick version 1.3.26, consider disabling the ReadOneJNGImage function as a temporary workaround until a patch is available. Restrict access to the coders/png.c module to minimize the risk of exploitation. Avoid using the PixelPacket pointer in the affected function until the issue is resolved.