Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe analysis of the provided patch clearly indicates that the vulnerability lies within the DespeckleImage function in the MagickCore/effect.c file. The patch addresses an integer overflow vulnerability that occurs during the calculation of the buffer size (length) needed for the despeckle operation. The original code length=(size_t) ((image->columns+2)*(image->rows+2)); is susceptible to an integer overflow on 32-bit systems if the image dimensions are sufficiently large. This overflow would result in a much smaller buffer being allocated than required. Subsequent operations that write to this buffer would then cause a heap-based buffer overflow. The patch mitigates this by adding checks to ensure that image->columns and image->rows do not exceed a safe limit (MAGICK_SIZE_MAX-2) before performing the multiplication, thus preventing the integer overflow. Therefore, the DespeckleImage function is the vulnerable function.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Magick.NET-Q16-AnyCPU | nuget | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-HDRI-AnyCPU | nuget | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-HDRI-x86 | nuget | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-x86 | nuget | < 14.12.0 | 14.12.0 |
| Magick.NET-Q8-AnyCPU | nuget | < 14.12.0 | 14.12.0 |
| Magick.NET-Q8-x86 | nuget | < 14.12.0 | 14.12.0 |
