Description
ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | =8:6.9.11.60+dfsg-1.3 || =8:6.9.11.60+dfsg-1.3+deb11u1 || =8:6.9.11.60+dfsg-1.3+deb11u10 || =8:6.9.11.60+dfsg-1.3+deb11u11 || =8:6.9.11.60+dfsg-1.3+deb11u12 || =8:6.9.11.60+dfsg-1.3+deb11u13 || =8:6.9.11.60+dfsg-1.3+deb11u14 || =8:6.9.11.60+dfsg-1.3+deb11u2 || =8:6.9.11.60+dfsg-1.3+deb11u3 || =8:6.9.11.60+dfsg-1.3+deb11u4 || =8:6.9.11.60+dfsg-1.3+deb11u5 || =8:6.9.11.60+dfsg-1.3+deb11u6 || =8:6.9.11.60+dfsg-1.3+deb11u7 || =8:6.9.11.60+dfsg-1.3+deb11u8 || =8:6.9.11.60+dfsg-1.3+deb11u9 || >=0 <8:6.9.11.60+dfsg-1.3+deb11u15 | 8:6.9.11.60+dfsg-1.3+deb11u15 |
debian 12 | | =8:6.9.11.60+dfsg-1.6 || =8:6.9.11.60+dfsg-1.6+deb12u1 || =8:6.9.11.60+dfsg-1.6+deb12u10 || =8:6.9.11.60+dfsg-1.6+deb12u11 || =8:6.9.11.60+dfsg-1.6+deb12u2 || =8:6.9.11.60+dfsg-1.6+deb12u3 || =8:6.9.11.60+dfsg-1.6+deb12u4 || =8:6.9.11.60+dfsg-1.6+deb12u5 || =8:6.9.11.60+dfsg-1.6+deb12u6 || =8:6.9.11.60+dfsg-1.6+deb12u7 || =8:6.9.11.60+dfsg-1.6+deb12u8 || =8:6.9.11.60+dfsg-1.6+deb12u9 || >=0 <8:6.9.11.60+dfsg-1.6+deb12u12 | 8:6.9.11.60+dfsg-1.6+deb12u12 |
debian 13 | | =8:7.1.1.43+dfsg1-1 || =8:7.1.1.43+dfsg1-1+deb13u1 || =8:7.1.1.43+dfsg1-1+deb13u10 || =8:7.1.1.43+dfsg1-1+deb13u2 || =8:7.1.1.43+dfsg1-1+deb13u3 || =8:7.1.1.43+dfsg1-1+deb13u4 || =8:7.1.1.43+dfsg1-1+deb13u5 || =8:7.1.1.43+dfsg1-1+deb13u6 || =8:7.1.1.43+dfsg1-1+deb13u7 || =8:7.1.1.43+dfsg1-1+deb13u8 || =8:7.1.1.43+dfsg1-1+deb13u9 || >=0 <8:7.1.1.43+dfsg1-1+deb13u11 | 8:7.1.1.43+dfsg1-1+deb13u11 |
debian 14 | | =8:7.1.1.43+dfsg1-1 || =8:7.1.1.46+dfsg1-1 || =8:7.1.1.47+dfsg1-1 || =8:7.1.1.47+dfsg1-2 || =8:7.1.2.1+dfsg1-1 || =8:7.1.2.12+dfsg1-1 || =8:7.1.2.13+dfsg1-1 || =8:7.1.2.3+dfsg1-1 || =8:7.1.2.7+dfsg1-1 || =8:7.1.2.8+dfsg1-1 || >=0 <8:7.1.2.15+dfsg1-1 | 8:7.1.2.15+dfsg1-1 |
 rpm rhel6 | | - | - |
rpm rhel7 | | - | - |
