title: Out of bounds memory write in PHP Imagick extension
description: In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party.
problem types: CWE-787 Out-of-bounds Write
affected:
{
product: PHP Imagick extension
vendor: PHP Group
versions:
lessThan: 3.4.4, status: affected, version: 3.4.4, versionType: custom
lessThan: 3.3.0*, status: affected, version: 3.3.0, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.0
]