← Database

CVE-2023-1906

MEDIUM CVSS: 5.5 Published: 2023-04-12 Modified: 2026-06-17

Description

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.

Affected Platforms

Fedoraproject FedoraImagemagick ImagemagickFedoraproject Extra Packages For Enterprise Linux

Weakness Type

CWE-122, CWE-787, CWE-787

References