CVE-2021-3610: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault.

Affected products

• Fedoraproject Fedora: version 34 only
• ImageMagick ImageMagick: from 6.9.10.88, before 6.9.12-14 (fixed in 6.9.12-14); from 7.0.0-0, before 7.0.11-14 (fixed in 7.0.11-14)
• Red Hat Enterprise Linux: version 8.0 only

Published 2022-02-24. Last modified 2026-06-17.