CVE-2021-3610CWE-125

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c

published February 24, 2022

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02762 · 86.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2022-02-24T00:00Z
EPSS history
Timeline
  • 24 FEB 00:00Z
    A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c
    cvelistv5