Resource Exhaustion Affecting graphicsmagick package, versions <1.3.26-1
Threat Intelligence
EPSS
1.27% (69th percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-ECHOLATEST-GRAPHICSMAGICK-19166003
- published22 Aug 2026
- disclosed3 Jul 2017
Introduced: 3 Jul 2017
CVE-2017-10799 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade Echo:latest graphicsmagick to version 1.3.26-1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream graphicsmagick package and not the graphicsmagick package as distributed by Echo.
See How to fix? for Echo:latest relevant fixed versions and status.
When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of service (OOM) can occur in ReadDPXImage().