A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade imagemagick-config-7-upstreamUpgrade libMagickWand-7_Q16HDRI10Upgrade libMagick++-develUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-develUpgrade libmagickwand-7_q16hdri10-32bitUpgrade libMagickCore-7_Q16HDRI10Upgrade libmagickcore-7_q16hdri10-32bitUpgrade ImageMagick-docUpgrade libmagick-devel-32bitUpgrade libmagick-7_q16hdri5-32bitUpgrade perl-PerlMagickUpgrade ImageMagick-extraUpgrade imagemagick-devel-32bitUpgrade ImageMagickUpgrade libMagick++-7_Q16HDRI5 | Jul 20, 2023 | Jun 16, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub