Published: 25/08/2022 Updated: 11/03/2023

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 0

An integer overflow issue exists in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.

Vulnerable Product	Search on Vulmon	Subscribe to Product
imagemagick imagemagick

Several security issues were fixed in ImageMagick ...

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-exportc Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char' When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash (CVE-2021-20 ...

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-exportc Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char' When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash ...

CWE-190 https://github.com/ImageMagick/ImageMagick/commit/5af1dffa4b6ab984b5f13d1e91c95760d75f12a6 https://github.com/ImageMagick/ImageMagick/pull/3083 https://github.com/ImageMagick/ImageMagick6/commit/553054c1cb1e4e05ec86237afef76a32cd7c464d https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html https://ubuntu.com/security/notices/USN-5736-1 https://nvd.nist.gov

CVE-2021-20224

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect