CVE-2018-20189: Debian Linux

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization.

Affected products

• Debian Debian Linux: version 8.0 only
• Graphicsmagick Graphicsmagick: version 1.3.31 only

Published 2018-12-17. Last modified 2026-06-17.