{"id":"CVE-2021-3962","details":"A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","modified":"2026-08-07T19:46:51.961230Z","published":"2021-11-19T17:15:08.733Z","references":[{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/issues/4446"},{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023196"},{"type":"FIX","url":"https://github.com/ImageMagick/ImageMagick/commit/82775af03bbb10a0a1d0e15c0156c75673b4525e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/imagemagick/imagemagick","events":[{"introduced":"e4182c967a9434f180cbb748b24ed437c287381b"},{"last_affected":"e4182c967a9434f180cbb748b24ed437c287381b"},{"fixed":"82775af03bbb10a0a1d0e15c0156c75673b4525e"}],"database_specific":{"cpe":"cpe:2.3:a:imagemagick:imagemagick:7.1.0-14:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.1.0-14"},{"last_affected":"7.1.0-14"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["7.1.0-14"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3962.json","vanir_signatures_modified":"2026-08-07T19:46:51Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"168201234120825407045811356471052558232","length":28099},"id":"CVE-2021-3962-4c4a4a80","signature_type":"Function","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/82775af03bbb10a0a1d0e15c0156c75673b4525e","target":{"file":"coders/dcm.c","function":"ReadDCMImage"}},{"id":"CVE-2021-3962-d545a7c7","signature_type":"Line","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/82775af03bbb10a0a1d0e15c0156c75673b4525e","target":{"file":"coders/dcm.c"},"deprecated":false,"digest":{"line_hashes":["96365956146326091874962122126684256162","32941904576902578390634455902709202179","175020562535202099546215091863215473795","204637689310248593106512844224599847026","31196623183621358262108349599421664569","199031081146211321297465123523238945430","195907706849790379440031066911105007962"],"threshold":0.9}}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}