Skip to content
fr Sign in
Not rated

CVE-2021-3962 A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert…

Description

A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected products and versions

Product Affected versions Fixed in
ImageMagick 7.1.0-14 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ImageMagick

The 69 CVEs of ImageMagick →
CVE-2023-3195 A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c Not rated CVE-2023-34474 A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c Not rated CVE-2023-34475 A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c Not rated CVE-2023-2157 A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application… 5.5 Medium
Track this CVE