Zongming Wang

The issue is caused by multiple memory corruption problems, which can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution. This is due to a buffer overflow in the WebKit display module, allowing a remote attacker to execute arbitrary code.

The issue is related to the functions `ReadBMPImage` and `WriteBMPImage` in `coders/bmp.c`, which allow attackers to cause an out of bounds write via a crafted file. This can potentially enable a remote attacker to execute arbitrary code using a specially crafted file.

The issue is related to the ReadDIBImage and WriteDIBImage functions in the coders/dib.c file of the ImageMagick console graphic editor. It involves a buffer overflow, where writing beyond the memory buffer boundaries can occur. This can be exploited by a remote attacker using a specially crafted file, potentially allowing them to execute arbitrary code.

The issue allows attackers to cause a heap-based buffer over-read via a crafted file, specifically through the SetGrayscaleImage function in the quantize.c file.