CVE-2019-12921

In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG.

• CWE-77

• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00049.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00051.htmlMailing List, Third Party Advisory
• http://www.graphicsmagick.org/Product, Vendor Advisory
• https://github.com/d0ge/data-processing/blob/master/CVE-2019-12921.mdThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/03/msg00026.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2020/dsa-4675Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00049.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00051.htmlMailing List, Third Party Advisory
• http://www.graphicsmagick.org/Product, Vendor Advisory
• https://github.com/d0ge/data-processing/blob/master/CVE-2019-12921.mdThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/03/msg00026.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2020/dsa-4675Third Party Advisory

Published

Mar 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12916Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-12917A reflected XSS vulnerability exists in Quest KACE Systems M…6.1
• CVE-2019-12918Quest KACE Systems Management Appliance Server Center versio…9.8
• CVE-2019-12919On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-…
• CVE-2019-1292A denial of service vulnerability exists when Windows improp…4.9
• CVE-2019-12920On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-…
• CVE-2019-12922A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any se…6.5
• CVE-2019-12923In MailEnable Enterprise Premium 10.23, the potential cross-…
• CVE-2019-12924MailEnable Enterprise Premium 10.23 was vulnerable to XML Ex…
• CVE-2019-12925MailEnable Enterprise Premium 10.23 was vulnerable to multip…
• CVE-2019-12926MailEnable Enterprise Premium 10.23 did not use appropriate …
• CVE-2019-12927MailEnable Enterprise Premium 10.23 was vulnerable to stored…