A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade ImageMagick-libsUpgrade ImageMagick-develUpgrade ImageMagick-perl-debuginfoUpgrade ImageMagick-c++-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-debugsourceUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-libs-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-doc | Feb 17, 2025 | Apr 2, 2023 |
| Debian | — | Upgrade imagemagick | Feb 26, 2024 | Apr 12, 2023 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | May 6, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade libMagick++-develUpgrade ImageMagickUpgrade ImageMagick-extraUpgrade perl-PerlMagickUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-docUpgrade libmagick-7_q16hdri5-32bitUpgrade libMagick++-7_Q16HDRI5Upgrade libMagickCore-7_Q16HDRI10Upgrade libMagickWand-7_Q16HDRI10Upgrade imagemagick-devel-32bitUpgrade libmagickcore-7_q16hdri10-32bitUpgrade libmagick-devel-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libmagickwand-7_q16hdri10-32bitUpgrade ImageMagick-devel | Apr 21, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand-6.q16-devUpgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6 (Ubuntu Pro)Upgrade imagemagick-6-common (Ubuntu Pro)Upgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3 (Ubuntu Pro)Upgrade imagemagickUpgrade imagemagick-commonUpgrade libmagickcore-6.q16hdri-3 (Ubuntu Pro)Upgrade perlmagickUpgrade libmagickwand-6.q16-6 (Ubuntu Pro)Upgrade libimage-magick-q16-perlUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16hdri-devUpgrade libmagickcore-6.q16-devUpgrade libmagick++-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickwand-6.q16-6Upgrade libmagick++-6.q16hdri-8 (Ubuntu Pro)Upgrade libmagickwand-devUpgrade libmagick++-devUpgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore-devUpgrade libmagickcore-6-headersUpgrade libmagick++-6.q16-7 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-7 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade libmagickwand-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6 (Ubuntu Pro)Upgrade libimage-magick-perlUpgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-devUpgrade libmagick++-6.q16hdri-8Upgrade libmagick++-6.q16-8 (Ubuntu Pro)Upgrade imagemagick-6-commonUpgrade libmagickcore-6.q16-6Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade libmagickwand-6.q16-3 (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade imagemagick-6.q16hdriUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagick-6.q16hdri (Ubuntu Pro) | Jul 5, 2023 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub