CVE-2016-6491 — Out-of-bounds Read in Imagemagick

CWE-125 — Out-of-bounds Read9 documents8 sources
Severity
8.8HIGHNVD
EPSS
1.2%
top 21.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ImagemagickOracle Solaris
Timeline
PublishedDec 13
Latest updateMay 17

Description

Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶Debianimagemagick/imagemagick< 8:6.9.6.2+dfsg-2+3
▶NVDimagemagick/imagemagick6.9.5-3+17
▶NVDoracle/solaris10.0, 11.3+1

Patches

Patch: www.openwall.com ↗Patch: github.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-78fx-5w4q-gxw3: Buffer overflow in the Get8BIMProperty function in MagickCore/property↗2022-05-17
▶
CVEList
CVE-2016-6491: Buffer overflow in the Get8BIMProperty function in MagickCore/property↗2016-12-13
▶
OSV
CVE-2016-6491: Buffer overflow in the Get8BIMProperty function in MagickCore/property↗2016-12-13
▶

📋Vendor Advisories

3
Ubuntu
ImageMagick vulnerabilities↗2016-11-21
▶
Red Hat
ImageMagick: Out-of-bounds read in CopyMagickMemory↗2016-07-28
▶
Debian
CVE-2016-6491: imagemagick - Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in Imag...↗2016
▶

💬Community

2
Bugzilla
CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory [fedora-all]↗2016-07-29
▶
Bugzilla
CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory↗2016-07-29
▶
CVE-2016-6491 — Out-of-bounds Read in Imagemagick | cvebase