GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c.
Published March 24, 2020.
Graphicsmagick Graphicsmagick