ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
Weakness
The product uses or accesses a resource that has not been initialized.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Graphicsmagick | Graphicsmagick | * | 1.3.46 (excluding) |
| Graphicsmagick | Ubuntu | oracular | * |
| Graphicsmagick | Ubuntu | upstream | * |