CVE-2017-10794: Buffer Overflow
Last updated 25 August 2025
Other sources
When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10794?
CVE-2017-10794 is classified as a buffer overflow vulnerability that can potentially lead to remote code execution and severe impacts.
How do I fix CVE-2017-10794?
To mitigate CVE-2017-10794, upgrade GraphicsMagick to versions 1.4+really1.3.36+hg16481-2+deb11u1, 1.4+really1.3.40-4, or 1.4+really1.3.45-1.
What software is affected by CVE-2017-10794?
CVE-2017-10794 affects GraphicsMagick version 1.3.25.
What causes the buffer overflow in CVE-2017-10794?
The buffer overflow in CVE-2017-10794 occurs when GraphicsMagick processes an RGB TIFF image with certain metadata.
Can CVE-2017-10794 be exploited remotely?
Yes, CVE-2017-10794 can be exploited remotely, allowing attackers to execute arbitrary code on vulnerable systems.