In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Jan 30, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Jan 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Jan 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Jan 30, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 30, 2018 |
| Suse | — | Upgrade perl-GraphicsMagickUpgrade libGraphicsMagick2Upgrade GraphicsMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1-32bitUpgrade libMagickWand1Upgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagick++-6_Q16-3Upgrade perl-PerlMagickUpgrade libMagickCore1-32bitUpgrade ImageMagick-develUpgrade libMagick++1Upgrade libMagick++-develUpgrade libMagickCore1Upgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-6_Q16-1 | Feb 21, 2018 | Jan 30, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade imagemagickUpgrade libmagick++5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2 | Jun 19, 2018 | Jan 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub