ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation fo...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Ubuntu:Pro:26.04:LTS imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"}]}]

参照URL

advisory ubuntu.com
report ubuntu.com
report cve.org
report github.com
report vulncheck.com