Graphicsmagick · Graphicsmagick · CVE-2019-11008
**Name of the Vulnerable Software and Affected Versions**
GraphicsMagick version 1.4 snapshot-20190322 Q8
**Description**
The issue is related to a heap-based buffer overflow in the `WriteXWDImage` function of `coders/xwd.c`. This allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted image file. The vulnerability can also be exploited to gain access to confidential information or disrupt service.
**Recommendations**
For GraphicsMagick version 1.4 snapshot-20190322 Q8, as a temporary workaround, consider disabling the `WriteXWDImage` function until a patch is available. Restrict access to crafted image files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.