CVE-2019-12921

In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG.

Date published : 2020-03-18

https://www.debian.org/security/2020/dsa-4675

http://www.graphicsmagick.org/