PT-2022-5599 · Unknown+6 · Imagemagick+6

·

CVE-2021-20224

·

Published

2021-03-04

·

Updated

2024-03-01

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick (affected versions not specified)
Description The issue is related to an integer overflow in the ExportIndexQuantum() function of ImageMagick. This can occur when the function calls GetPixelIndex(), resulting in values outside the range of representable for the unsigned char. The exploitation of this issue may allow an attacker to cause a denial of service or execute arbitrary code by using a specially crafted file, such as a PDF.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2021-1438
ALT-PU-2024-2243
BDU:2022-03313
BDU:2022-06962
CVE-2021-20224
DLA-3357-1
DLA-3357-2
MGASA-2022-0446
OPENSUSE-SU-2022_3119-1
SUSE-SU-2022:3119-1
SUSE-SU-2022:3138-1
SUSE-SU-2022_3119-1
SUSE-SU-2022_3138-1
SUSE-SU-2023:4634-1
USN-5736-1
USN-5736-2
USN-6200-1

Affected Products

Alt Linux
Astra Linux
Imagemagick
Linuxmint
Red Os
Suse
Ubuntu