CyberRota Analysis
AI-GeneratedThe vulnerability affects the BGR decoder in ImageMagick versions prior to 7.1.2-27, allowing for a heap buffer over-read when processing specially crafted images. This could potentially lead to information disclosure or application crashes. Organizations using affected versions of ImageMagick should prioritize updating to the patched version to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file in every location so a crafted image could result in an heap buffer over-read. This issue has been fixed in version 7.1.2-27.
Related CVEs
Other vulnerabilities affecting the same vendor(s)