VULNERABILITY INTELLIGENCE

CVE-2023-3428

CVSS score6.2 MEDIUM

EPSS probability0.31%

CISA KEVNot currently listed

Published2023-10-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

Weakness classification

CWE-122: Heap-based Buffer Overflow
CWE-787: Out-of-bounds Write

Primary references

secalert@redhat.com — Third Party Advisory
secalert@redhat.com — Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory