CVE-2017-11643: Graphicsmagick

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths.

Affected products

• Graphicsmagick Graphicsmagick: version 1.3.26 only

Published 2017-07-26. Last modified 2026-06-17.