In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-9"}]}]

Debian:13 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-9"}]}]

Debian:14 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-9"}]}]

参照URL

advisory security-tracker.debian.org