CVE-2017-18219

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26

Description: An issue was discovered that allows attackers to cause a denial of service via a crafted file. The problem is related to an allocation failure in the ReadOnePNGImage function in coders/png.c, which attempts a large png pixels array allocation.

Recommendations: For GraphicsMagick version 1.3.26, as a temporary workaround, consider restricting the use of the ReadOnePNGImage function in coders/png.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.