Buffer Overflow Vulnerability in ImageMagick Product by ImageMagick
CVE-2022-28463

7.8HIGH

Key Information:

Vendor
Imagemagick
Status
Imagemagick
Vendor
CVE Published:
8 May 2022

Summary

ImageMagick version 7.1.0-27 is identified to have a buffer overflow vulnerability that may allow attackers to execute arbitrary code or cause a denial of service. This issue arises from improper handling of certain image formats. Users are urged to update to secure versions promptly to safeguard against possible exploitation.

References

https://github.com/ImageMagick/ImageMagick/issues/4988
https://github.com/ImageMagick/ImageMagick/commit/ca3654e...
https://github.com/ImageMagick/ImageMagick6/commit/e6ea58...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.