ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Oct 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-devel | Oct 28, 2020 | Oct 14, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Oct 14, 2019 |
| Centos_linux | — | Upgrade autotraceUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade inkscape-viewUpgrade ImageMagick-c++ | Apr 1, 2020 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade emacs-noxUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade autotrace-develUpgrade autotraceUpgrade emacs-terminalUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-develUpgrade emacsUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade emacs-elUpgrade inkscape-docs | Oct 5, 2022 | Jul 14, 2019 |
| Redhat_linux | — | No solution existsUpgrade ImageMagick-docUpgrade ImageMagickUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-devel | Apr 1, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub