CVE-2017-16547

CVE-2017-16547 describes a denial-of-service vulnerability in GraphicsMagick versions 1.3.26 and earlier, specifically within the DrawImage function. An attacker can exploit this by crafting a malicious file that causes a negative strncpy operation, leading to an application crash and potential other impacts. With a CVSS v3 score of 8.8 (High), this vulnerability is easily exploitable over a network with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.