oss-security - Stack overflow in imagemagick coders/tiff.c

Message-ID: <2308609.bdg04gU6LQ@portable-bastien>
Date: Mon, 29 May 2023 08:11:18 +0000
From: Bastien Roucariès <rouca@...ian.org>
To: oss-security <oss-security@...ts.openwall.com>
Subject: Stack overflow in imagemagick coders/tiff.c

Hi,

Reading changelog and code of imagemagick, I want to report a stack overflow with crafted tiff file in imagemagick

Fixed (after 6.9.12-26) by:
https://github.com/ImageMagick/ImageMagick6/commit/85a370c79afeb45a97842b0959366af5236e9023

Original reporter was Muhammad Aldo Firmansyah

Thanks 

Bastien (rouca)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.