ImageMagick
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*
- < 7.1.2-16
- < 6.9.13-41
A heap buffer overflow vulnerability has been identified in ImageMagick's SFW decoder, specifically in 32-bit builds prior to versions 7.1.2-16 and 6.9.13-41. This vulnerability allows extremely large images to be processed in a way that causes a crash, indicating a potential for exploitation.
Exploitation of this vulnerability leads to a crash of the SFW decoder, causing a denial-of-service condition.
Users can upgrade to ImageMagick versions 7.1.2-16 or 6.9.13-41 to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.