CVE-2017-18230

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26

Description: A NULL pointer dereference issue was discovered in the function ReadCINEONImage in coders/cineon.c. This allows attackers to cause a denial of service via a crafted file.

Recommendations: For GraphicsMagick version 1.3.26, consider avoiding the use of the ReadCINEONImage function in coders/cineon.c until a patch is available. As a temporary workaround, restrict the processing of crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.