Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow. This occurs because it is possible for the colormap to have less than 256 valid values but the loop condition will loop 256 times, attempting to pass invalid colormap data to the event logger. The patch replaces the hardcoded 256 value with a call to MagickMin() to ensure the proper value is used. This could impact application availability when a specially crafted input file is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.
CVSS Information
N/A
Vulnerability Type
堆缓冲区溢出
Vulnerability Title
ImageMagick Studio ImageMagick 安全漏洞
Vulnerability Description
Imagemagick Studio ImageMagick是美国ImageMagick Studio（Imagemagick Studio）公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。 ImageMagick 7.0.8-68之前版本存在安全漏洞，该漏洞源于PNG编码器的WriteOnePNGImage()有一个for循环，它有一个不合适的退出条件，可以通过堆-缓冲区-溢出来允许越界读取。
CVSS Information
N/A
Vulnerability Type
N/A