Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j6f7-9c5w-9r2q

Опубликовано: 10 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 3.7

Описание

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

EPSS

Процентиль: 14%
0.0023
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.7
ubuntu
25 дней назад

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

CVSS3: 5.9
redhat
25 дней назад

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

CVSS3: 3.7
nvd
25 дней назад

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

CVSS3: 3.7
debian
25 дней назад

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in ...

CVSS3: 3.7
redos
12 дней назад

Уязвимость ImageMagick

EPSS

Процентиль: 14%
0.0023
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-416