Description (CNA)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operation. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ImageMagick / ImageMagick | affected < 6.9.13-48; affected < 7.1.2-24 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.
No references supplied.
A flaw was found in ImageMagick. A missing check in the DCM (Digital Imaging and Communications in Medicine) decoder allows a remote attacker to provide a specially crafted image with invalid dimensions. This can lead to crashes in other operations, resulting in a denial of service (DoS) for the application processing the image.