Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-13606

Опубликовано: 28 июн. 2026
Источник: redhat
CVSS3: 8.1

Описание

A flaw was found in GraphicsMagick's Photo CD (PCD) decoder. A remote attacker could exploit this vulnerability by providing a specially crafted PCD file. This could lead to an out-of-bounds write, corrupting memory and potentially causing a denial of service or other unpredictable system behavior.

Отчет

This Important flaw in GraphicsMagick's PCD decoder allows an out-of-bounds write when processing a specially crafted PCD file under specific decoding conditions, such as a page/subimage index of 4 or higher, or a size hint of 1536x1024 or greater. This could lead to heap corruption and potentially arbitrary code execution, impacting applications that process untrusted PCD image files.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Дополнительная информация

Статус:

Important
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2494107GraphicsMagick: GraphicsMagick: Memory corruption via crafted Photo CD (PCD) file

8.1 High

CVSS3

Связанные уязвимости

ubuntu
около 2 месяцев назад

[Unknown description]

debian

Описание отсутствует

suse-cvrf
около 1 месяца назад

Security update for GraphicsMagick

suse-cvrf
около 1 месяца назад

Security update for GraphicsMagick

8.1 High

CVSS3