CVE-2023-34474 (published 2023-06-16T00:00:00)
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.
Affected products: Vendor: n/a
Product: ImageMagick
Versions: Fixed in ImageMagick 7.1.1-10