PT-2026-28491 · Unknown+1 · Imagemagick+1
Fumfel
·
Publicado
2026-01-01
·
Atualizado
2026-06-17
·
CVE-2026-33536
CVSS v3.1
5.1
Média
| Vetor | AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.1.2-18
ImageMagick versions prior to 6.9.13-43
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Due to an incorrect return value on certain platforms, a pointer is incremented past the end of a buffer on the stack, potentially resulting in an out-of-bounds write. The issue occurs when a specific function returns an incorrect value, leading to memory corruption.
Recommendations
Versions prior to 7.1.2-18 should be updated to version 7.1.2-18 or later.
Versions prior to 6.9.13-43 should be updated to version 6.9.13-43 or later.
Exploit
Correção
DoS
Memory Corruption
Stack Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Imagemagick
Red Os