Bugzilla – Bug 1153868
VUL-0: CVE-2019-17547: ImageMagick: use-after-free in TraceBezier in MagickCore/draw.c
Last modified: 2022-01-07 12:15:28 UTC
CVE-2019-17547 In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free. References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16537 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-17547 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17547 https://github.com/ImageMagick/ImageMagick/compare/7.0.8-51...7.0.8-62 https://github.com/ImageMagick/ImageMagick/commit/ecf7c6b288e11e7e7f75387c5e9e93e423b98397
In older code streams, the code is different: patched code: control_points=quantum*number_coordinates; if (CheckPrimitiveExtent(mvg_info,control_points+1) == MagickFalse) { points=(PointInfo *) RelinquishMagickMemory(points); coefficients=(double *) RelinquishMagickMemory(coefficients); return(MagickFalse); } + primitive_info=(*mvg_info->primitive_info)+mvg_info->offset; 15/ImageMagick if (CheckPrimitiveExtent(mvg_info,control_points+1) != MagickFalse) primitive_info=(*mvg_info->primitive_info)+mvg_info->offset; Considering older code streams unaffected by this CVE. In case of any doubts, feel free to reopen with an explanation and a reproducer.
Closing as Not Affected.