MEDIUM
Imagemagick: heap use-after-free in coders/bmp.c
Published Nov 19, 2023
6.2
MEDIUMCVSS 3.1
EPSS 0.48%
Description
A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.
Affected products
No data.
Configuration 1
AND
- < 7.1.2
Running on/with
OR
- 6.0
- 7.0
Configuration 2
OR
- 8.0
- 38
No data.
Red Hat Enterprise Linux 6
ImageMagick
Out of support scope
Red Hat Enterprise Linux 7
ImageMagick
Out of support scope
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | ImageMagick | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | ImageMagick | Out of support scope | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (9)
- https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHATVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2241774 issue-trackingx_refsource_REDHATIssue TrackingPatch
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57658 Advisory
- https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc8324f71e531f1 Patch
- https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LICYTADFJAFPZW3Y2MKNCJIUYODPAG4L/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAULDP3GG5KI3XITQ5XSMRSILCBZS2VK/
- https://nvd.nist.gov/vuln/detail/CVE-2023-5341
- https://www.cve.org/CVERecord?id=CVE-2023-5341
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Nov 19, 2023
Updated Nov 20, 2025
Reserved Oct 2, 2023
Link CVE-2023-5341
CISA Vulnrichment
Updated Jan 2, 2024
GitHub
No data