NetSight
high7.1

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding.

Impact

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
from 7.0.9-27 through 7.0.10-17

Weakness classification

References