In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Oct 1, 2024 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | May 27, 2020 | Sep 1, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.34-11.4.10.0.1.3.0 on Solaris 11.4 | Jun 26, 2019 | Sep 1, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 1, 2018 |
| Suse | — | Upgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-devel-32bitUpgrade ImageMagick-develUpgrade ImageMagick-config-7-SUSEUpgrade libMagickCore-6_Q16-1Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-extraUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-7_Q16HDRI6Upgrade imagemagick-devel-32bitUpgrade ImageMagick-docUpgrade ImageMagick-config-6-upstreamUpgrade libMagick++-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade imagemagick-config-7-upstreamUpgrade perl-PerlMagick | Sep 22, 2018 | Sep 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub