CVE-2023-5341CWE-416

Imagemagick: heap use-after-free in coders/bmp.c

Medium · published November 19, 2023

CVSS v3.1
6.2
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00478 · 40.3th percentile
Weakness
CWE-416 · Use After Free
Published
2023-11-19T09:20Z
EPSS history
Timeline
  • 19 NOV 09:20Z
    Imagemagick: heap use-after-free in coders/bmp.c
    cvelistv5