CVE-2023-34474 (extra_packages_for_enterprise_linux, fedora, imagemagick)

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.

application buffer buffer overflow coders crash cve denial of service error fedora file function imagemagick issue local out-of-bounds overflow service