ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 1, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 28, 2020 | Jul 1, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 1, 2019 |
| Centos_linux | — | Upgrade autotraceUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-devel | Apr 1, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 28, 2019 | Jul 1, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 1, 2019 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade emacs-noxUpgrade ImageMagickUpgrade emacs-elUpgrade ImageMagick-perlUpgrade emacs-filesystemUpgrade inkscapeUpgrade emacsUpgrade inkscape-viewUpgrade inkscape-docsUpgrade emacs-terminal | Oct 5, 2022 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade ImageMagickNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade inkscapeUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perl | Apr 1, 2020 | Jul 1, 2019 |
| Suse | — | Upgrade ImageMagick-config-7-SUSEUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade perl-PerlMagickUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-develUpgrade imagemagick-config-7-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-devel-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-docUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-develUpgrade libmagick-devel-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-extra | Jul 30, 2019 | Jul 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub