CVE-2016-8683: Buffer Overflow
The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8683?
CVE-2016-8683 has a moderate severity level due to its potential to cause memory allocation failures.
How do I fix CVE-2016-8683?
To fix CVE-2016-8683, upgrade to a patched version of GraphicsMagick that addresses this vulnerability.
What is the impact of CVE-2016-8683 on affected systems?
CVE-2016-8683 can lead to a memory allocation failure which may result in file truncation errors when processing crafted images.
Which software versions are affected by CVE-2016-8683?
CVE-2016-8683 affects GraphicsMagick version 1.3.25 and specific versions of Debian and openSUSE distributions.
Can remote attackers exploit CVE-2016-8683?
Yes, remote attackers can exploit CVE-2016-8683 by sending specially crafted image files to trigger the vulnerabilities.