CVE-2023-3745
Summary
| CVE | CVE-2023-3745 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-07-24 16:15:00 UTC |
|---|
| Updated | 2023-11-07 04:19:00 UTC |
|---|
| Description | A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a denial of service. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| https://github.com/ImageMagick/ImageMagick/issues/1857 · ImageMagick/ImageMagick@54cdc14 · GitHub |
MISC |
github.com |
|
| https://github.com/ImageMagick/ImageMagick/issues/1857 · ImageMagick/ImageMagick@651672f · GitHub |
MISC |
github.com |
|
| cve-details |
MISC |
access.redhat.com |
|
| 2223557 – (CVE-2023-3745) CVE-2023-3745 ImageMagick: heap-buffer-overflow in PushCharPixel() in quantum-private.h |
MISC |
bugzilla.redhat.com |
|
| https://github.com/ImageMagick/ImageMagick/issues/1857 · ImageMagick/ImageMagick6@7486477 · GitHub |
MISC |
github.com |
|
| heap-buffer-overflow in /MagickCore/quantum-private.h · Issue #1857 · ImageMagick/ImageMagick · GitHub |
MISC |
github.com |
|
| https://github.com/ImageMagick/ImageMagick/issues/1857 · ImageMagick/ImageMagick6@b466a96 · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 355755 Amazon Linux Security Advisory for ImageMagick : ALAS-2023-1791
- 355787 Amazon Linux Security Advisory for ImageMagick : ALAS2-2023-2178
- 754285 SUSE Enterprise Linux Security Update for ImageMagick (SUSE-SU-2023:3357-1)
