CVE-2016-8684: Buffer Overflow
The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8684?
CVE-2016-8684 has not been explicitly assigned a severity rating, but it relates to a memory allocation failure that can lead to issues with file handling.
How do I fix CVE-2016-8684?
To mitigate CVE-2016-8684, update GraphicsMagick to a version later than 1.3.25 that addresses the memory allocation issue.
Who is affected by CVE-2016-8684?
CVE-2016-8684 affects users of GraphicsMagick 1.3.25, as well as those running specific versions of openSUSE and Debian Linux.
What kind of attack vector is CVE-2016-8684 associated with?
CVE-2016-8684 can be exploited by remote attackers through specially crafted images that trigger memory allocation failures.
What can happen if I am vulnerable to CVE-2016-8684?
If vulnerable to CVE-2016-8684, the application may experience a memory allocation failure, potentially leading to file truncation errors for corrupt image files.