CVE-2026-62343

Severity N/A

ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

설명

An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel.

Score Summary

CVSS Score: 4.7
Version: 3.1
VPI: 47
Why this VPI (explainable, experimental)
VPI breakdown
Impact 47.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 47.00
VPI formula vpi-v1
EPSS: —
Attack Vector: Local Access
High Complexity
No Privileges
User Interaction Required
Scope Unchanged
No Confidentiality Impact
No Integrity Impact
High Availability Impact

Details

CWE Weakness Classification

References (3)

Affected Packages (17)

https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0

Impact	47.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	47.00