CVE-2016-5688 in ImageMagick
Summary
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex function or an invalid write operation in the (2) ScaleCharToQuantum or (3) SetPixelIndex functions.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/16/2016
Disclosure
12/13/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 94146 | ImageMagick WPG Parser SetPixelIndex memory corruption | 119 | Not defined | Official fix | CVE-2016-5688 |