| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | ≥ 7.0.0-0, < 7.0.9-0< 6.9.10-69 | 7.0.9-06.9.10-69 |
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type `ssize_t`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free