A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault.
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "imagemagick-6-common", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "imagemagick-6-doc", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "imagemagick-6.q16", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "imagemagick-6.q16-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "imagemagick-6.q16hdri", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "imagemagick-6.q16hdri-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libimage-magick-perl", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libimage-magick-q16-perl", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libimage-magick-q16-perl-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libimage-magick-q16hdri-perl", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libimage-magick-q16hdri-perl-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagick++-6-headers", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagick++-6.q16-8", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagick++-6.q16-8-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagick++-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagick++-6.q16hdri-8", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagick++-6.q16hdri-8-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagick++-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6-arch-config", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6-headers", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16-6", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16-6-extra", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16-6-extra-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16hdri-6", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16hdri-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16hdri-6-extra", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16hdri-6-extra-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickwand-6-headers", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickwand-6.q16-6", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickwand-6.q16-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickwand-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickwand-6.q16hdri-6", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickwand-6.q16hdri-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickwand-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" }, { "binary_name": "perlmagick", "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "imagemagick-6-common", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "imagemagick-6-doc", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "imagemagick-6.q16", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "imagemagick-6.q16-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "imagemagick-6.q16hdri", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "imagemagick-6.q16hdri-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libimage-magick-perl", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libimage-magick-q16-perl", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libimage-magick-q16-perl-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libimage-magick-q16hdri-perl", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libimage-magick-q16hdri-perl-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagick++-6-headers", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagick++-6.q16-8", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagick++-6.q16-8-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagick++-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagick++-6.q16hdri-8", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagick++-6.q16hdri-8-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagick++-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6-arch-config", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6-headers", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16-6", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16-6-extra", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16-6-extra-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-6", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-6-extra", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-6-extra-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickwand-6-headers", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickwand-6.q16-6", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickwand-6.q16-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickwand-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickwand-6.q16hdri-6", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickwand-6.q16hdri-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickwand-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" }, { "binary_name": "perlmagick", "binary_version": "8:6.9.11.60+dfsg-1.6ubuntu1" } ] }