CVE-2018-20184: Buffer Overflow
In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2018-20184.
What is the severity level of CVE-2018-20184?
The severity level of CVE-2018-20184 is medium.
How does the vulnerability CVE-2018-20184 occur?
CVE-2018-20184 is a heap-based buffer overflow vulnerability that occurs in the WriteTGAImage function of tga.c in GraphicsMagick.
What is the impact of CVE-2018-20184?
The vulnerability CVE-2018-20184 allows attackers to cause a denial of service via a crafted image file, as the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification.
How can I mitigate the vulnerability CVE-2018-20184?
To mitigate the vulnerability CVE-2018-20184, it is recommended to update GraphicsMagick to the fixed versions provided by the vendor.