CVE-2012-3438
EPSS 1.1%Published: 8/7/2012Modified: 4/28/2026
Description
The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.
Affected packages (1)
- Debian/graphicsmagickfrom 0, < 1.3.16-1.1