Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-84wp-3vxv-vr3v

Опубликовано: 11 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 3.3

Описание

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

EPSS

Процентиль: 7%
0.00173
Низкий

4.8 Medium

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 3.3
ubuntu
23 дня назад

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

CVSS3: 5.5
redhat
23 дня назад

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

CVSS3: 3.3
nvd
23 дня назад

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

CVSS3: 3.3
debian
23 дня назад

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the a ...

suse-cvrf
14 дней назад

Security update for ImageMagick

EPSS

Процентиль: 7%
0.00173
Низкий

4.8 Medium

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-770