Lack of data validation - Path Traversal In ImageMagick
Description
A flaw was found in TIFFGetProfiles() in /coders/tiff.c calls strstr(), which causes a large out-of-bounds read when it searches for "dc:format=\"image/dng\" within profile due to improper string handling when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this issue. The highest threat from this vulnerability is to system availability.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component |
|---|---|
 rpm rhel7 | |
rpm rhel5 | |
rpm rhel6 | |
rpm rhel9 |
Aliases
1. 2. 3.