ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 1, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-perl | Oct 28, 2020 | Jul 1, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Jul 1, 2019 |
| Centos_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade autotraceUpgrade autotrace-debuginfo | Apr 1, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 28, 2019 | Jul 1, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 1, 2019 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade ImageMagick-docUpgrade inkscapeUpgrade emacs-commonUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade emacsUpgrade autotraceUpgrade ImageMagickUpgrade autotrace-develUpgrade emacs-elUpgrade ImageMagick-c++Upgrade emacs-terminalUpgrade emacs-noxUpgrade ImageMagick-perl | Oct 5, 2022 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade ImageMagickUpgrade ImageMagick-docNo solution existsUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagick-devel | Apr 1, 2020 | Jul 1, 2019 |
| Suse | — | Upgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagickWand-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-develUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-devel-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagick-devel-32bitUpgrade ImageMagick-extraUpgrade ImageMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-docUpgrade libMagick++-devel | Jul 30, 2019 | Jul 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub