CVE-2021-4219

ImageMagick におけるサービス運用妨害 (DoS)

Affected versions of this package are vulnerable to Denial of Service (DoS) via crafted SVG file which is submitted to the ImageMagick, to let ImageMagick hang forever from reading a file descriptor.

Disclosure Date

2021/12/22

Credit

stypr (@stereotype32)

CWE

• CWE-20

Product URLs

• https://imagemagick.org/

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=2054611
• https://github.com/ImageMagick/ImageMagick/issues/4626