High severity7.5NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026
CVE-2021-3610
CVE-2021-3610
Description
A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*range: >=6.9.10.88,<6.9.12-14
- (no CPE)
- (no CPE)range: <7.0.11-14
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2023/05/29/4nvdMailing ListPatch
- www.openwall.com/lists/oss-security/2023/06/05/1nvdMailing ListPatch
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- github.com/ImageMagick/ImageMagick/commit/930ff0d1a9bc42925a7856e9ea53f5fc9f318bf3nvdPatch
- github.com/fuzzing2026/CVE-PoCs/tree/main/imagemagick-CVE-2021-3610nvd
News mentions
0No linked articles in our index yet.