CVE-2023-3428
Imagemagick: heap-buffer-overflow in coders/tiff.c
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Imagemagick: heap-buffer-overflow in coders/tiff.c
| Assigner | redhat |
| Reserved | 2023-06-27 |
| Published | 2023-10-04 |
| Updated | 2024-08-20 |
A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.
| CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 2023-06-27: | Reported to Red Hat. |
| 2023-06-27: | Made public. |
Red Hat would like to thank Hardik shah of Vehere (Dawn Treaders team) for reporting this issue.
https://access.redhat.com/security/cve/CVE-2023-3428
https://bugzilla.redhat.com/show_bug.cgi?id=2218369 (RHBZ#2218369)
