Non notée
CVE-2021-3962 A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert…
Description
A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ImageMagick | 7.1.0-14 | Pas de correctif indiqué |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de ImageMagick
Les 69 CVE de ImageMagick →
CVE-2023-3195
A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c
Non notée
CVE-2023-34474
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c
Non notée
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c
Non notée
CVE-2023-2157
A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application…
5.5
Moyenne