tocsin

Debian/imagemagick: high 7.1

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology

Action: Upgrade imagemagick to 8:6.9.11.60+dfsg-1.6+deb12u12 or later.

Affected

introducedfixedlast affected
08:6.9.11.60+dfsg-1.6+deb12u12-

Fixed versions

8:6.9.11.60+dfsg-1.6+deb12u12

Sources

published · modified · JSON