The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Mar 23, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Mar 23, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 29, 2022 | Mar 23, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 23, 2018 |
| Suse | — | Upgrade libMagickWand-6_Q16-1Upgrade libMagick++-develUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore1Upgrade perl-PerlMagickUpgrade libMagickCore1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand1-32bitUpgrade ImageMagickUpgrade libMagick++1Upgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1 | May 3, 2018 | Mar 23, 2018 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extraUpgrade libmagickcore5Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagick++5 | Jun 19, 2018 | Mar 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub