Description
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a ImageMagick
Fixed in ImageMagick 6.9.12-43, ImageMagick 7.1.0-28affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2091811 ↗
- https://github.com/ImageMagick/ImageMagick/commit/9c9a84cec4ab28ee0b57c2b9266d6fbe68183512 ↗
- https://github.com/ImageMagick/ImageMagick6/commit/450949ed017f009b399c937cf362f0058eacc5fa ↗
- https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html ↗