ImageMagick
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*
- < 7.1.2-16
- < 6.9.13-41
A heap-buffer overflow vulnerability has been identified in ImageMagick versions prior to 7.1.2-16 and 6.9.13-41. The issue arises in the PCL encoding process, where an undersized output buffer allocation creates the potential for memory corruption.
Exploitation of this vulnerability leads to a heap-buffer overflow, which can commonly result in memory corruption and potentially allow for arbitrary code execution.
Users can upgrade to ImageMagick versions 7.1.2-16 or 6.9.13-41 to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.