0.001 Low
EPSS
Percentile
29.6%
ImageMagick is vulnerable to denial of service. An attacker is allowed to send an input value which is outside the range of representable values of type ‘unsigned long’ at MagickCore/statistic.c to trigger an application crash.
bugzilla.redhat.com/show_bug.cgi?id=1894683
github.com/ImageMagick/ImageMagick/issues/1735
github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5
lists.debian.org/debian-lts-announce/2021/03/msg00030.html
lists.debian.org/debian-lts-announce/2023/03/msg00008.html