Andsopwn

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 **Description** An integer overflow exists in the PSB (PSD v2) RLE decoding path within the `ReadPSDChannelRLE()` function located in coders/psd.c. On 32-bit builds, this flaw causes a heap out-of-bounds read, which occurs when the system reads data outside the intended buffer boundaries. Processing a specially crafted PSB file can result in a crash or information disclosure. **Recommendations** Update to version 7.1.2-15 or later. Update to version 6.9.13-40 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 **Description** ImageMagick is software used for editing and manipulating digital images. Before versions 7.1.2-16 and 6.9.13-41, the authorization check for the `path` domain occurred before the file was fully opened or used. This allowed a symlink swap to bypass read/write restrictions enforced by policy. **Recommendations** Update ImageMagick to version 7.1.2-16 or later. Update ImageMagick to version 6.9.13-41 or later.