Published: 23/03/2022 Updated: 30/03/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an malicious user to crash the system.

Vulnerable Product	Search on Vulmon	Subscribe to Product
imagemagick imagemagick

Debian Bug report logs - #1013282 imagemagick: CVE-2022-28463 CVE-2021-20241 CVE-2021-20243 CVE-2021-20244 CVE-2021-20245 CVE-2021-20246 CVE-2021-20309 CVE-2021-20312 CVE-2021-20313 CVE-2021-4219 CVE-2022-1114 CVE-2022-1115 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@lists ...

Several security issues were fixed in ImageMagick ...

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-exportc Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char' When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash (CVE-2021-20 ...

CWE-20 https://bugzilla.redhat.com/show_bug.cgi?id=2054611 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1013282 https://ubuntu.com/security/notices/USN-5736-1 https://nvd.nist.gov

CVE-2021-4219

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect