Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-18008
HistoryFeb 25, 2022 - 12:00 a.m.

ImageMagick code issue vulnerability (CNVD-2022-18008)

2022-02-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.003 Low

EPSS

Percentile

67.9%

Imagemagick Studio ImageMagick is a set of open source image processing software from the American company ImageMagick Studio (Imagemagick Studio). The software can read, convert, or write images in a variety of formats.ImageMagick has a security vulnerability that stems from a null pointer dereference flaw found in ReadSVGImage() in coders svg.c. The flaw is due to a failure to check libxml2’s xmlCreatePushParser. The issue is due to a failure to check the return value of libxml2’s xmlCreatePushParserCtxt() and use that value directly, which can lead to crashes and segmentation errors. No detailed vulnerability details are currently available.