In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Oct 1, 2024 | Mar 7, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick | Oct 28, 2020 | Mar 7, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Mar 7, 2019 |
| Centos_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade inkscape-docs | Apr 1, 2020 | Mar 7, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Mar 7, 2019 |
| Freebsd | — | Upgrade ImageMagick7-nox11Upgrade ImageMagick6-nox11Upgrade ImageMagick6Upgrade ImageMagick7 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 30, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Jul 2, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jun 27, 2019 | Mar 7, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Mar 7, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade autotraceUpgrade emacs-commonUpgrade emacs-elUpgrade emacs-terminalUpgrade emacs-noxUpgrade emacsUpgrade inkscape-docsUpgrade inkscapeUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-develUpgrade emacs-filesystem | Oct 5, 2022 | Jan 17, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade autotrace-develUpgrade autotrace-debuginfoUpgrade ImageMagickNo solution existsUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade inkscape | Apr 1, 2020 | Mar 7, 2019 |
| Suse | — | Upgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-devel-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-config-7-SUSEUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-develUpgrade libmagick-devel-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagick++1Upgrade libMagickCore1Upgrade ImageMagickUpgrade libMagickWand1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade perl-GraphicsMagickUpgrade libMagickWand1Upgrade perl-PerlMagickUpgrade GraphicsMagickUpgrade libMagick++-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickWand-6_Q16-1Upgrade libGraphicsMagick2Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-extraUpgrade libMagickCore1-32bitUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++-6_Q16-3 | Apr 1, 2019 | Mar 7, 2019 |
| Ubuntu | — | Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-8Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro) | Jun 25, 2019 | Mar 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub