CVE-2016-8683: Debian Linux

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."

Affected products

• Debian Debian Linux: version 8.0 only
• Graphicsmagick Graphicsmagick: version 1.3.25 only
• Opensuse Opensuse: version 13.2 only

Published 2017-02-15. Last modified 2026-06-17.