New subject: [Bug 2116537] ImageMagick: Assertion Failure could lead to DoS due to attempted writing of NULL image list

8 Aug 2022


      https://bugzilla.redhat.com/show_bug.cgi?id=2116537
Bug ID: 2116537
           Summary: ImageMagick: Assertion Failure could lead to DoS due
                    to attempted writing of NULL image list
           Product: Security Response
          Hardware: All
                OS: Linux
            Status: NEW
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team@redhat.com
          Reporter: tcullum@redhat.com
                CC: blaise@gmail.com, dcavalca@fb.com,
                    epel-packagers-sig@lists.fedoraproject.org,
                    fedora@famillecollet.com, jhorak@redhat.com,
                    luya_tfz@thefinalzone.net, michel@michel-slm.name,
                    ngompa13@gmail.com, pampelmuse@gmx.at,
                    sergio@serjux.com, troy@troycurtisjr.com
  Target Milestone: ---
    Classification: Other
In ImageMagick 7.1.0-29, a crafted file could trigger an assertion failure when
a call to WriteImages was made in MagickWand/operation.c, due to a NULL image
list. This could potentially cause a denial of service. This was fixed in
upstream ImageMagick version 7.1.0-30.
References:
https://github.com/ImageMagick/ImageMagick/commit/716496e6df0add89e9679d6da9...
-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2116537

[Bug 2116537] New: ImageMagick: Assertion Failure could lead to DoS due to attempted writing of NULL image list