Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28974
HistoryJan 12, 2021 - 10:25 p.m.

Denial Of Service (DoS)

2021-01-1222:25:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
imagemagick
vulnerability
tiffsetprofiles
data validation

EPSS

0.001

Percentile

46.5%

imagemagick is vulnerable to denial of service (DoS). The vulnerability exists through the TIFFSetProfiles function in coders/tiff.c where TIFFGetField return values imply that data validation has occurred.