In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Dec 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++ | Oct 28, 2020 | Dec 24, 2019 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Dec 24, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade inkscape-view | Apr 1, 2020 | Dec 24, 2019 |
| Debian | — | Upgrade imagemagick | Jan 2, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 29, 2022 | Dec 24, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.91-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 24, 2019 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade emacsUpgrade emacs-elUpgrade emacs-terminalUpgrade inkscapeUpgrade emacs-filesystemUpgrade inkscape-docs | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-perlUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade ImageMagickUpgrade autotrace-debuginfoNo solution existsUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-c++ | Apr 1, 2020 | Dec 24, 2019 |
| Suse | — | Upgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade ImageMagick-config-6-SUSEUpgrade imagemagick-config-7-upstreamUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-config-6-upstreamUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-extraUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickWand-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade ImageMagick-config-7-SUSEUpgrade imagemagick-devel-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-devel-32bit | Feb 6, 2020 | Dec 24, 2019 |
| Ubuntu | — | Upgrade libmagickcore5 (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagickwand-6.q16-3Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade imagemagick-6.q16hdriUpgrade libmagickcore-6.q16hdri-3Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16hdri-8Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16hdri-3-extraUpgrade libmagickcore-6.q16hdri-6Upgrade libmagickwand-6.q16hdri-3Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickwand-6.q16-2Upgrade libmagickcore-6.q16hdri-6-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16hdri-7Upgrade libmagickwand-6.q16hdri-6Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand-6.q16-6 | Sep 29, 2020 | Dec 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub