PT-2026-51784 · Unknown+1 · Imagemagick+1
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.1.2-19
Description
An out-of-bounds access issue exists in the
ConnectedComponentsImage() function when processing connected-components artifacts with invalid indices. When the connected-components:* define specifies an invalid index, it results in an access violation. This can be triggered by specifying malformed connected-components definitions via the CLI, potentially leading to denial of service or code execution.Recommendations
Update to version 7.1.2-19 or later.
Exploit
Fix
DoS
Memory Corruption
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Imagemagick
Red Os