High severity8.8NVD Advisory· Published Feb 7, 2018· Updated Jun 17, 2026
CVE-2018-6799
CVE-2018-6799
Description
The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6<1.3.28+ 2 more
- (no CPE)range: <1.3.28
- cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*range: <1.3.28
- (no CPE)range: <1.3.28
Patches
Vulnerability mechanics
References
7- hg.graphicsmagick.org/hg/GraphicsMagick/rev/b41e2efce6d3nvdPatchVendor Advisory
- www.securityfocus.com/bid/102981nvdThird Party AdvisoryVDB Entry
- lists.debian.org/debian-lts-announce/2018/02/msg00017.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlnvdMailing ListThird Party Advisory
- www.debian.org/security/2018/dsa-4321nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/nvd
News mentions
0No linked articles in our index yet.