PT-2026-32529 · Unknown+1 · Imagemagick+1
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 6.9.13-44
ImageMagick versions prior to 7.1.2-19
Description
An integer overflow in the
despeckle() operation causes a heap buffer overflow on 32-bit builds, resulting in an out-of-bounds write.Recommendations
Update to version 6.9.13-44 or later.
Update to version 7.1.2-19 or later.
As a temporary workaround, consider restricting the use of the
despeckle() operation.Exploit
Fix
DoS
Memory Corruption
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Imagemagick
Red Os