description: A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service.
problem types: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer.
affected:
{
product: ImageMagick
vendor: n/a
versions:
status: affected, version: Fixed in ImageMagick6 v6.9.12-44, ImageMagick7 v7.1.0-29
}