CVE-2023-3745 — Out-of-bounds Read in Imagemagick

CWE-125 — Out-of-bounds ReadCWE-787 — Out-of-bounds WriteCWE-122 — Heap-based Buffer Overflow5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 99.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ImagemagickDebian Imagemagick
Timeline
PublishedJul 24

Description

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/imagemagick< imagemagick 8:6.9.11.24+dfsg-1 (bookworm)
▶NVDimagemagick/imagemagick6.0 — 6.9-11-0+1
▶Debianimagemagick/imagemagick< 8:6.9.11.24+dfsg-1+3

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fw7q-prfm-977f: A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private↗2023-07-24
▶
OSV
CVE-2023-3745: A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private↗2023-07-24
▶

📋Vendor Advisories

2
Debian
CVE-2023-3745: imagemagick - A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() fu...↗2023
▶
Red Hat
ImageMagick: heap-buffer-overflow in PushCharPixel() in quantum-private.h↗2020-03-02
▶