CVE-2019-10131 — Off-by-one Error in Imagemagick
Severity
7.1HIGHNVD
EPSS
0.1%
top 66.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 30
Latest updateSep 13
Description
An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages5 packages
Also affects: Debian Linux 9.0, Ubuntu Linux 16.04, 18.04, 18.10, 19.04, Enterprise Linux 7.0
Patches
🔴Vulnerability Details
2📋Vendor Advisories
4Debian▶
CVE-2019-10131: imagemagick - An off-by-one read vulnerability was discovered in ImageMagick before version 7....↗2019