CVE-2023-34475 — Use After Free in Imagemagick

CWE-416 — Use After Free5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 93.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
ImagemagickFedoraproject Extra Packages FOR Enterprise LinuxFedoraproject Fedora
Timeline
PublishedJun 16

Description

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDimagemagick/imagemagick< 7.1.1-10
▶CVEListV5imagemagick/imagemagick7.1.1-10

Also affects: Fedora 37, 38

Patches

Patch: bugzilla.redhat.com ↗Patch: github.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mcff-wj2q-69j3: A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile↗2023-06-16
▶
CVEList
CVE-2023-34475: A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile↗2023-06-16
▶

📋Vendor Advisories

2
Red Hat
ImageMagick: heap use-after-free issue in ReplaceXmpValue() function in MagickCore/profile.c.↗2023-06-01
▶
Debian
CVE-2023-34475: imagemagick - A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() fu...↗2023
▶