| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | ≥ 7.0.9-27, ≤ 7.0.10-17 |
ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free