Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28368
HistoryDec 06, 2020 - 4:14 a.m.

Arbitrary Code Execution

2020-12-0604:14:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
imagemagick
arbitrary code execution
buffer overflow
writeonepngimage
png.c
software vulnerability

EPSS

0.001

Percentile

34.6%

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage() in coders/png.c allows an attacker to execute arbitrary code via a malicious file.