Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-zdnb-14uw-xucc |
| Summary | ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts
When the `connected-components:*` define specifies an invalid index and out of bound operation will result in an access violation. |
| Aliases |
| 0 |
| alias |
GHSA-pmpg-6pww-fg6q |
|
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
| 0 |
| cwe_id |
125 |
| name |
Out-of-bounds Read |
| description |
The product reads data past the end, or before the beginning, of the intended buffer. |
|
| 1 |
| cwe_id |
787 |
| name |
Out-of-bounds Write |
| description |
The product writes data past the end, or before the beginning, of the intended buffer. |
|
|
| Exploits |
|
| Severity_range_score | 0.1 - 3.3 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-zdnb-14uw-xucc |