Описание
ImageMagick has XMP profile write that triggers hang due to unbounded loop
Summary
Infinite lines occur when writing during a specific XMP file conversion command
Details
In this code, the loop while(fabs(df - value) > MagickEpsilon)
keeps repeating endlessly.
PoC
magick hang a.mng
https://drive.google.com/file/d/1iegkwlTjqnJTtM4XkiheYsjKsC6pxtId/view?usp=sharing
Impact
XMP profile write triggers hang due to unbounded loop
credits
Team Pay1oad DVE
Reporter : Shinyoung Won (with contributions from WooJin Park, DongHa Lee, JungWoo Park, Woojin Jeon, Juwon Chae, Kyusang Han, JaeHun Gou)
yosimich(@yosiimich) Shinyoung Won of SSA Lab
e-mail : [yosimich123@gmail.com]
Woojin Jeon
Gtihub : brainoverflow
e-mail : [root@brainoverflow.kr]
WooJin Park
GitHub : jin-156
e-mail : [1203kids@gmail.com]
Who4mI(@GAP-dev) Lee DongHa of SSA Lab
Github: GAP-dev
e-mail : [ceo@zeropointer.co.kr]
JungWoo Park
Github : JungWooJJING
e-mail : [cuby5577@gmail.com]
Juwon Chae
Github : I_mho
e-mail : [wndnjs4698@naver.com]
Kyusang Han
Github : T1deSEC
e-mail : [hksjoe0081@gmail.com]
JaeHun Gou
Github : P2GONE
e-mail : [charly20@naver.com]
Commits
Fixed in: https://github.com/ImageMagick/ImageMagick/commit/229fa96a988a21d78318bbca61245a6ed1ee33a0 and https://github.com/ImageMagick/ImageMagick/commit/38631605e6ab744548a561797472cf8648bcfe26
Ссылки
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vmhh-8rxq-fp9g
- https://nvd.nist.gov/vuln/detail/CVE-2025-53015
- https://github.com/ImageMagick/ImageMagick/commit/229fa96a988a21d78318bbca61245a6ed1ee33a0
- https://github.com/ImageMagick/ImageMagick/commit/38631605e6ab744548a561797472cf8648bcfe26
- https://drive.google.com/file/d/1iegkwlTjqnJTtM4XkiheYsjKsC6pxtId/view?usp=sharing
- https://github.com/dlemstra/Magick.NET/releases/tag/14.7.0
Пакеты
Magick.NET-Q8-AnyCPU
< 14.7.0
14.7.0
Magick.NET-Q16-AnyCPU
< 14.7.0
14.7.0
Magick.NET-Q16-HDRI-AnyCPU
< 14.7.0
14.7.0
Magick.NET-Q8-x64
< 14.7.0
14.7.0
Magick.NET-Q8-arm64
< 14.7.0
14.7.0
Magick.NET-Q8-x86
< 14.7.0
14.7.0
Magick.NET-Q8-OpenMP-x64
< 14.7.0
14.7.0
Magick.NET-Q8-OpenMP-arm64
< 14.7.0
14.7.0
Magick.NET-Q16-x64
< 14.7.0
14.7.0
Magick.NET-Q16-arm64
< 14.7.0
14.7.0
Magick.NET-Q16-x86
< 14.7.0
14.7.0
Magick.NET-Q16-OpenMP-x64
< 14.7.0
14.7.0
Magick.NET-Q16-OpenMP-arm64
< 14.7.0
14.7.0
Magick.NET-Q16-OpenMP-x86
< 14.7.0
14.7.0
Magick.NET-Q16-HDRI-x64
< 14.7.0
14.7.0
Magick.NET-Q16-HDRI-arm64
< 14.7.0
14.7.0
Magick.NET-Q16-HDRI-x86
< 14.7.0
14.7.0
Magick.NET-Q16-HDRI-OpenMP-x64
< 14.7.0
14.7.0
Magick.NET-Q16-HDRI-OpenMP-arm64
< 14.7.0
14.7.0
Связанные уязвимости
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing during a specific XMP file conversion command. Version 7.1.2-0 fixes the issue.
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing during a specific XMP file conversion command. Version 7.1.2-0 fixes the issue.
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing during a specific XMP file conversion command. Version 7.1.2-0 fixes the issue.
ImageMagick is free and open-source software used for editing and mani ...