CVE-2023-34475CWE-416

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c

published June 16, 2023

CVSS
—
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00352 · 27.7th percentile
Weakness
CWE-416 · Use After Free
Published
2023-06-16T00:00Z
EPSS history
Timeline
  • 16 JUN 00:00Z
    A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c
    cvelistv5