Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rg39-4fm5-hrp2

Опубликовано: 21 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 3.7

Описание

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.

EPSS

Процентиль: 15%
0.00236
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 3.7
ubuntu
около 1 месяца назад

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.

CVSS3: 4.2
redhat
около 1 месяца назад

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.

CVSS3: 3.7
nvd
около 1 месяца назад

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.

CVSS3: 3.7
debian
около 1 месяца назад

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an int ...

CVSS3: 9.1
fstec
около 1 месяца назад

Уязвимость консольного графического редактора ImageMagick, связанная с чтением за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 15%
0.00236
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-125