CVE-2018-20184: Debian Linux

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification.

Affected products

• Debian Debian Linux: version 8.0 only
• Graphicsmagick Graphicsmagick: version 1.4 only

Published 2018-12-17. Last modified 2026-06-17.