CVE-2017-10794: Graphicsmagick

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode.

Affected products

• Graphicsmagick Graphicsmagick: version 1.3.25 only

Published 2017-07-02. Last modified 2026-06-17.