CVE-2018-5360: Graphicsmagick

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.

Affected products

• Graphicsmagick Graphicsmagick: version 1.3.27 only
• Libtiff Libtiff: before 4.0.6 (fixed in 4.0.6)

Published 2018-01-14. Last modified 2026-06-17.