CVE-2019-15141

WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer…

published August 18, 2019

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02183 · 82.2th percentile
Published
2019-08-18T18:30Z
EPSS history
Timeline
  • 18 AUG 18:30Z
    WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer…
    cvelistv5