CVE-2019-11473: Medium severity GraphicsMagick Graphicsmagick vulnerability
Published Apr 23, 2019
·Updated
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
Affected Software
2 affected componentsFixes available
GraphicsMagick Graphicsmagick=1.3.31
debian/graphicsmagick
1.4+really1.3.36+hg16481-2+deb11u11.4+really1.3.40-4+deb12u11.4+really1.3.45+hg17696-11.4+really1.3.46-2
Remediation
Event History
Apr 23, 2019
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
Description
Feb 20, 2026
Data Sourced
via Ubuntu·06:59 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·06:59 PM
Description
Data Sourced
via Debian·07:00 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-11473.
2
What is the severity rating of CVE-2019-11473?
CVE-2019-11473 has a severity rating of 6.5 (Medium).
3
What is the impact of CVE-2019-11473?
CVE-2019-11473 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting a malicious XWD image file.
4
Which software versions are affected by CVE-2019-11473?
GraphicsMagick versions 1.3.31 are affected by CVE-2019-11473.
5
How can I fix CVE-2019-11473?
To fix CVE-2019-11473, you can update to one of the following versions: 1.4+really1.3.35-1~deb10u2, 1.4+really1.3.35-1~deb10u3, 1.4+really1.3.36+hg16481-2+deb11u1, 1.4+really1.3.40-4, 1.4+really1.3.42-1.