GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-13777.json"
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.26"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
}
]