-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability is an out-of-bounds read in the IsPixelMonochrome function. No specific commit patches were directly linked or found for this CVE that fix the issue (the vendor noted it as a Q64 issue they don't support). The vulnerable functions and runtime indicators were identified based on the detailed stack trace provided in the GitHub issue #272 (https://github.com/ImageMagick/ImageMagick/issues/272). This stack trace shows the sequence of function calls when a crafted file triggers the heap-buffer-overflow. IsPixelMonochrome is where the error occurs. The other listed functions (IdentifyImageMonochrome, IdentifyImageType, IdentifyImage, IdentifyImageCommand) are all part of the call stack that processes the malicious input (crafted file) and leads to the vulnerable function call, making them relevant runtime indicators and functions that process potentially malicious input.
A Semantic Attack on Google Gemini - Read the Latest Research