2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"ImageMagick","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in ImageMagick-7.0.10-57, ImageMagick6-6.9.11-57"}]}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","matchCriteriaId":"7C873805-B51C-4D74-86D1-78B609ADFE21","versionEndExcluding":"6.9.11-57","vulnerable":true},{"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","matchCriteriaId":"4CE77734-7D7E-4D73-9B49-F99157A5794B","versionEndExcluding":"7.0.10-57","versionStartIncluding":"7.0.0-0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash."},{"lang":"es","value":"Se ha detectado un problema de desbordamiento de enteros en la función ExportIndexQuantum() de ImageMagick en el archivo MagickCore/quantum-export.c. Las llamadas a la función GetPixelIndex() podrían resultar en valores fuera del rango representable para el \"unsigned char\". Cuando ImageMagick procesa un archivo pdf diseñado, esto podría conllevar a un comportamiento no definido o un bloqueo."}],"id":"CVE-2021-20224","lastModified":"2026-06-17T03:33:30.000","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-08-25T20:15:08.873","references":[{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://github.com/ImageMagick/ImageMagick/commit/5af1dffa4b6ab984b5f13d1e91c95760d75f12a6"},{"source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://github.com/ImageMagick/ImageMagick/pull/3083"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://github.com/ImageMagick/ImageMagick6/commit/553054c1cb1e4e05ec86237afef76a32cd7c464d"},{"source":"secalert@redhat.com","url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://github.com/ImageMagick/ImageMagick/commit/5af1dffa4b6ab984b5f13d1e91c95760d75f12a6"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://github.com/ImageMagick/ImageMagick/pull/3083"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://github.com/ImageMagick/ImageMagick6/commit/553054c1cb1e4e05ec86237afef76a32cd7c464d"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-190"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-190"}],"source":"nvd@nist.gov","type":"Primary"}]}
|