The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Jul 23, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Jul 23, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 3, 2020 | Jul 23, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Jul 23, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2018 |
| Ubuntu | — | Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++5Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2 | Oct 17, 2018 | Jul 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub