Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r86g-g8qv-wvcr

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

EPSS

Процентиль: 80%
0.01336
Низкий

8.8 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 8 лет назад

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

CVSS3: 3.3
redhat
около 8 лет назад

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

CVSS3: 8.8
nvd
около 8 лет назад

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

CVSS3: 8.8
debian
около 8 лет назад

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based b ...

suse-cvrf
около 8 лет назад

Security update for ImageMagick

EPSS

Процентиль: 80%
0.01336
Низкий

8.8 High

CVSS3

Дефекты

CWE-125