There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 6, 2018 |
| Debian | — | Upgrade imagemagick | Oct 14, 2018 | Sep 6, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 6, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 6, 2018 |
| Suse | — | Upgrade perl-PerlMagickUpgrade ImageMagick-extraUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-docUpgrade libMagickWand1-32bitUpgrade libgraphicsmagick3-configUpgrade libgraphicsmagick-q16-12Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickWand-6_Q16-1Upgrade libMagickWand1Upgrade perl-GraphicsMagickUpgrade ImageMagick-config-6-upstreamUpgrade libgraphicsmagick-develUpgrade ImageMagickUpgrade ImageMagick-config-6-SUSEUpgrade graphicsmagick-develUpgrade imagemagick-devel-32bitUpgrade libMagickCore1-32bitUpgrade libGraphicsMagick2Upgrade GraphicsMagickUpgrade imagemagick-config-7-upstreamUpgrade libgraphicsmagick-q16-3Upgrade libMagickCore1Upgrade libMagick++-7_Q16HDRI4Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagick++-develUpgrade libgraphicsmagickwand-q16-2Upgrade libMagick++1Upgrade libmagick-devel-32bitUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-develUpgrade ImageMagick-config-7-SUSEUpgrade libmagickcore-7_q16hdri6-32bit | Sep 18, 2018 | Sep 6, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-8Upgrade libmagickcore5-extraUpgrade libmagick++5Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16 | Oct 17, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub