PT-2026-107982 · Unknown · Imagemagick
CVSS v3.1
4.0
متوسطة
| المتجه | AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 6.9.13-56
ImageMagick versions prior to 7.1.2-31
Description
The CUT encoder lacks a security policy check, which allows configured security policies to be bypassed. An attacker can provide specially crafted input to be processed by the CUT encoder, potentially leading to an application crash or the leakage of sensitive data.
Recommendations
Update to version 6.9.13-56 or later.
Update to version 7.1.2-31 or later.
استغلال
إصلاح
Improper Access Control
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Imagemagick