CVE-2013-4589: The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attacker...

Security readout for executives and security teams

CVE-2013-4589 is a denial-of-service flaw in GraphicsMagick before 1.3.18. A crafted 8-bit RGBA image operation involving alpha export could crash the process. The business impact is service disruption where GraphicsMagick handles untrusted images, not data theft or code execution based on the supplied sources. Exposure is most likely on servers or applications running GraphicsMagick before 1.3.18 and processing images supplied by external users or partners. Systems not using GraphicsMagick, using fixed vendor packages, or not handling untrusted image content have lower likely exposure. Prioritize patching for public-facing upload or media-processing services. Treat internal-only, non-image-processing systems as lower urgency. The main credible risk from the supplied evidence is availability loss. Mitigation focus: Upgrade GraphicsMagick to 1.3.18 or a vendor-fixed package.; Apply relevant distribution advisories from Gentoo, Fedora, SUSE, or your OS vendor.; Limit untrusted image processing until affected systems are patched..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.