CVE-2023-3745

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a denial of service.

• CWE-125
• CWE-787

• https://access.redhat.com/security/cve/CVE-2023-3745Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2223557Issue Tracking, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/54cdc146bbe50018526770be201b56643ad58ba7Patch
• https://github.com/ImageMagick/ImageMagick/commit/651672f19c75161a6159d9b6838fd3095b6c5304Patch
• https://github.com/ImageMagick/ImageMagick/issues/1857Exploit, Issue Tracking
• https://github.com/ImageMagick/ImageMagick6/commit/7486477aa00c5c7856b111506da075b6cdfa8b73Patch
• https://github.com/ImageMagick/ImageMagick6/commit/b466a96965afc1308a4ace93f5535c2b770f294bPatch
• https://access.redhat.com/security/cve/CVE-2023-3745Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2223557Issue Tracking, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/54cdc146bbe50018526770be201b56643ad58ba7Patch
• https://github.com/ImageMagick/ImageMagick/commit/651672f19c75161a6159d9b6838fd3095b6c5304Patch
• https://github.com/ImageMagick/ImageMagick/issues/1857Exploit, Issue Tracking
• https://github.com/ImageMagick/ImageMagick6/commit/7486477aa00c5c7856b111506da075b6cdfa8b73Patch
• https://github.com/ImageMagick/ImageMagick6/commit/b466a96965afc1308a4ace93f5535c2b770f294bPatch

Published

Jul 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37443Multiple out-of-bounds read vulnerabilities exist in the VCD…7.8
• CVE-2023-37444Multiple out-of-bounds read vulnerabilities exist in the VCD…7.8
• CVE-2023-37445Multiple out-of-bounds read vulnerabilities exist in the VCD…7.8
• CVE-2023-37446Multiple out-of-bounds read vulnerabilities exist in the VCD…7.8
• CVE-2023-37447Multiple out-of-bounds read vulnerabilities exist in the VCD…7.8
• CVE-2023-37448A lock screen issue was addressed with improved state manage…3.3
• CVE-2023-37450The issue was addressed with improved checks. This issue is …8.8
• CVE-2023-37453An issue was discovered in the USB subsystem in the Linux ke…4.6
• CVE-2023-37454An issue was discovered in the Linux kernel through 6.4.2. A…5.5
• CVE-2023-37455The permission request prompt from the site in the backgroun…5.4
• CVE-2023-37456The session restore helper crashed whenever there was no par…6.5
• CVE-2023-37457Asterisk is an open source private branch exchange and telep…8.2