CVE-2023-3745
24.07.2023, 16:15
A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a denial of service.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| imagemagick | imagemagick | 6.0 ≤ 𝑥 < 6.9-11-0 |
| imagemagick | imagemagick | 7.0.0-0 ≤ 𝑥 < 7.0.10-0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| ImageMagick |
| ||||||||
| ImageMagick-config-6-SUSE |
| ||||||||
| ImageMagick-config-6-upstream |
| ||||||||
| ImageMagick-config-7-SUSE |
| ||||||||
| ImageMagick-config-7-upstream |
| ||||||||
| ImageMagick-devel |
| ||||||||
| libMagick++-6_Q16-3 |
| ||||||||
| libMagick++-7_Q16HDRI4 |
| ||||||||
| libMagick++-devel |
| ||||||||
| libMagickCore-6_Q16-1 |
| ||||||||
| libMagickCore-6_Q16-1-32bit |
| ||||||||
| libMagickCore-7_Q16HDRI6 |
| ||||||||
| libMagickWand-6_Q16-1 |
| ||||||||
| libMagickWand-7_Q16HDRI6 |
| ||||||||
| perl-PerlMagick |
|
Common Weakness Enumeration
References