Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69.
CVSS Information
N/A
Vulnerability Type
整数溢出或超界折返
Vulnerability Title
ImageMagick Studio ImageMagick 输入验证错误漏洞
Vulnerability Description
Imagemagick Studio ImageMagick是美国ImageMagick Studio(Imagemagick Studio)公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。 ImageMagick 6.9.10-69之前版本存在安全漏洞,该漏洞源于ApplyEvaluateOperator()中有几个区域,大小t转换应该是ssize t转换,当ImageMagick处理精心制作的输入文件时,在某些情况下会导致值超出范围。
CVSS Information
N/A
Vulnerability Type
N/A