CVE-2020-10251

Description

In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in codersheic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.542

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Imagemagic (x64) 7.0.9	Windows
Multiple Vulnerabilities are affected in Imagemagic 7.0.9	Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.9	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234