Heap-based Buffer Overflow in ImageMagick Affects Multiple Users

CVE-2023-34474

What is CVE-2023-34474?

A heap-based buffer overflow vulnerability has been identified in the ImageMagick software, specifically within the ReadTIM2ImageData() function located in coders/tim2.c. This flaw allows a local attacker to craft a malicious file that, when opened by a user, can exploit an out-of-bounds read issue. This can lead to the crashing of the application, ultimately resulting in a denial of service, disrupting normal operations.

References