Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-34475
5.5
MEDIUMCVSS v3
Published
June 16, 2023
Affected
7 projects
Assigned by
Red Hat
Severity scale
010
Description
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service.
ImageMagick/ImageMagick
GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.
GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.< 7.1.1-10NVD
NPM
Crates.io
Docker Hub
RubyGems