Threats tagged 'ghsa-5w78-w8pm-578p'

ImageMagick versions before 7.1.2-35 and 6.9.13-60 contain an infinite loop vulnerability in the SVG decoder. This occurs because the function QueueAuthenticPixelCacheNexus in MagickCore/cache.c does not properly validate the requested pixel region's width and height. An attacker can craft an SVG image that causes the decoder to repeatedly process a non-advancing pixel region, leading to excessive CPU consumption and hanging the decoding process.