{"id":"CVE-2023-2157","aliases":["DEBIAN-CVE-2023-2157","EUVD-2023-33675","GHSA-336m-6jwp-8932","JLSEC-2026-903","OESA-2023-1330","OESA-2023-1331","OESA-2023-1332","OESA-2023-1333","openSUSE-SU-2024:12954-1"],"status":"published","title":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to...","description":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0101,"percentile":0.63431,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2023-06-06T00:00:00Z","modified":"2026-10-28T02:30:41Z","fixes":[{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.12.98+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.12.98+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["7.1.1+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"ImageMagick","fixed_in":["6.9.12.86-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ImageMagick","fixed_in":["6.9.12.86-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"ImageMagick","fixed_in":["7.1.1.8-1.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"ImageMagick","fixed_in":["7.1.1.8-1.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","fixed_in":["7.1.1.10-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.12.98+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.12.98+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.1.1+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.12.86-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.12.86-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.8-1.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.8-1.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.10-1.1"}]}]}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208537","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2157","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA"},{"url":"https://github.com/advisories/GHSA-336m-6jwp-8932"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2157.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-2157","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1330","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1331","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1332","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1333","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2157","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-2157","description":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2025-01-07T21:31:18.253Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:23.645864Z"}],"euvd":[{"id":"EUVD-2023-33675","description":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2025-01-07T21:31:18Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:24.370175Z"}],"ghsa":[{"id":"GHSA-336m-6jwp-8932","title":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to...","description":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.","status":"published","published":"2023-06-06T21:30:18Z","modified":"2024-04-04T04:36:36Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:56:25.511354Z"}],"nvd":[{"id":"CVE-2023-2157","description":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.","status":"published","published":"2023-06-06T20:15:12.12Z","modified":"2026-06-17T05:51:52.733Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:08:05.329837Z"}],"osv":[{"id":"CVE-2023-2157","description":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2026-10-28T02:30:41.296274846Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"DEBIAN-CVE-2023-2157","description":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.","status":"published","published":"2023-06-06T20:15:12.12Z","modified":"2026-10-26T18:00:27.456908046Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"JLSEC-2026-903","description":"A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:23:57.926906458Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2023-1330","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\r\n\r\nA heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.(CVE-2023-2157)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:16:57.489144049Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1331","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\r\n\r\nA heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.(CVE-2023-2157)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:43.99830278Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1332","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\r\n\r\nA heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.(CVE-2023-2157)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:16:58.340631893Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1333","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\r\n\r\nA heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.(CVE-2023-2157)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:44.000850357Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"openSUSE-SU-2024:12954-1","title":"ImageMagick-7.1.1.10-1.1 on GA media","description":"These are all security issues fixed in the ImageMagick-7.1.1.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:28:15.837587Z","updated_at":"2026-11-02T16:58:36.025801Z"}]}}