PT-2026-110688 · Unknown · Imagemagick
CVSS v4.0
6.3
Medium
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions 7.1.2-30 through 7.1.2-31
Description
A use after free issue exists in the WBINFO decoder. This occurs when a memory allocation fails during image decoding, allowing a crafted image to cause freed memory to be reused, which results in an application crash.
Recommendations
Update ImageMagick to version 7.1.2-32.
Exploit
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Imagemagick