[Secure-testing-team] Bug#834501: Outofbound in exif (jpeg) reader

Bastien ROUCARIES roucaries.bastien at gmail.com
Tue Aug 16 11:48:28 UTC 2016


Package: src:imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-team at lists.alioth.debian.org


Canged the JPEG writer to raise a warning when the exif profile
exceeds 65533 bytes and truncate it.

Avoid out of bound on malformed jpeg file

(cherry picked from commit 9e187b73a8a1290bb0e1a1c878f8be1917aa8742)



More information about the Secure-testing-team mailing list