The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a ReferenceBlob and a NULL pointer.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Graphicsmagick | Graphicsmagick | * | 1.3.25 (including) |
| Graphicsmagick | Ubuntu | artful | * |
| Graphicsmagick | Ubuntu | precise | * |
| Graphicsmagick | Ubuntu | trusty | * |
| Graphicsmagick | Ubuntu | upstream | * |
| Graphicsmagick | Ubuntu | xenial | * |
| Graphicsmagick | Ubuntu | yakkety | * |
| Graphicsmagick | Ubuntu | zesty | * |