REDHAT-BUG-1164248: Low severity imagemagick vulnerability

Published Nov 14, 2014
·
Updated

An out-of-bounds memory access flaw was found in ImageMagick's JPEG decoder. A local attacker could potentially use this flaw to crash an application using ImageMagick to process a specially crafted JPEG image.

The fix for this issue is available at:

http://trac.imagemagick.org/changeset/16872

The reproducer (a specially crafted JPEG image) along with additional information on this flaw can be found at:

http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26456

Affected Software

1 affected component
ImageMagick

Event History

Nov 14, 2014
Data Sourced
via Red Hat·12:59 PM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-1164248?

The severity of REDHAT-BUG-1164248 is considered critical due to the potential for application crashes.

2

How do I fix REDHAT-BUG-1164248?

To fix REDHAT-BUG-1164248, users should update to the latest version of ImageMagick where the vulnerability is patched.

3

What type of vulnerability is REDHAT-BUG-1164248?

REDHAT-BUG-1164248 is an out-of-bounds memory access flaw specifically in ImageMagick's JPEG decoder.

4

Who is affected by REDHAT-BUG-1164248?

Local applications that utilize ImageMagick to process JPEG images are affected by REDHAT-BUG-1164248.

5

What impact does REDHAT-BUG-1164248 have on systems?

The impact of REDHAT-BUG-1164248 allows an attacker to potentially crash applications using ImageMagick with specially crafted JPEG images.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203