A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 26, 2024 | Feb 24, 2022 |
| Ubuntu | — | Upgrade libmagick++-6.q16-devUpgrade libmagick++-6.q16hdri-8 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-devUpgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6-headersUpgrade libmagickwand-6.q16-3 (Ubuntu Pro)Upgrade imagemagick-6.q16hdri (Ubuntu Pro)Upgrade libmagickwand-6.q16-devUpgrade libmagickwand-6.q16-6 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6 (Ubuntu Pro)Upgrade imagemagick-6-commonUpgrade imagemagick-common (Ubuntu Pro)Upgrade libimage-magick-q16-perlUpgrade libmagick++-6.q16hdri-8Upgrade libmagickcore-6.q16hdri-3 (Ubuntu Pro)Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libimage-magick-perlUpgrade libmagickwand-6.q16-6Upgrade imagemagick-commonUpgrade libmagickcore-devUpgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagick++-6.q16-7 (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade perlmagickUpgrade libmagick++-devUpgrade imagemagick-6-common (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-7 (Ubuntu Pro)Upgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3 (Ubuntu Pro)Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickwand-devUpgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16hdriUpgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-dev | Jul 5, 2023 | Feb 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub