CVE-2016-8677

Description

The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.651

Associated Vulnerability

Vulnerability	OS Platform
Vulnerability CVE-2016-7799,CVE-2016-7906,CVE-2016-8677,CVE-2016-8707 are affected in Imagemagic (x64) 7.0.3	Windows
Vulnerability CVE-2016-7799,CVE-2016-7906,CVE-2016-8677,CVE-2016-8707 are affected in Imagemagic 7.0.3	Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.3	Windows
imagemagick security update(DSA-3726-1) imagemagick_6.8.9.9-5+deb8u6_i386.deb	Linux
imagemagick security update(DSA-3726-1) imagemagick_6.8.9.9-5+deb8u6_amd64.deb	Linux
imagemagick security update(DSA-3726-1) imagemagick_6.8.9.9-5+deb8u6_kfreebsd-i386.deb	Linux
imagemagick security update(DSA-3726-1) imagemagick_6.8.9.9-5+deb8u6_kfreebsd-amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234