Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-20173
HistoryFeb 25, 2022 - 12:00 a.m.

Imagemagick Studio ImageMagick Buffer Overflow Vulnerability (CNVD-2022-20173)

2022-02-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

35.3%

Imagemagick Studio ImageMagick is a set of open source image processing software from ImageMagick Studio (Imagemagick Studio), Inc. The software can read, convert, or write images in a variety of formats.ImageMagick suffers from a buffer overflow vulnerability that stems from a heap-based buffer overflow vulnerability found in ReadTIFFImage() in encoder tiff.c. The issue is due to incorrectly set pixel array sizes, which can lead to crashes and segmentation failures. No detailed vulnerability details are currently available.