Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-63193
HistoryJul 30, 2023 - 12:00 a.m.

ImageMagick Buffer Overflow Vulnerability (CNVD-2023-63193)

2023-07-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
image processing software
buffer overflow
vulnerability
remote attacker
arbitrary code
denial of service

0.0004 Low

EPSS

Percentile

10.5%

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert or write images in a variety of formats. ImageMagick has a buffer overflow vulnerability, the vulnerability stems from the function PushCharPixel() fails to correctly validate the length and size of the input data, which can be exploited by a remote attacker to execute arbitrary code on the system or cause a denial of service attack.