An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Mar 7, 2023 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade ImageMagick | Mar 7, 2023 | Aug 25, 2022 |
| Debian | — | Upgrade imagemagick | Mar 13, 2023 | Aug 25, 2022 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | May 6, 2024 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | — | Jun 9, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | — | Feb 9, 2023 | Aug 25, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 25, 2022 |
| Suse | — | Upgrade ImageMagickUpgrade perl-PerlMagickUpgrade libMagick++-6_Q16-3Upgrade libMagickWand-6_Q16-1Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-6-SUSEUpgrade libMagick++-develUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-docUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagick-devel-32bitUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-develUpgrade imagemagick-devel-32bit | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-6-extra (Ubuntu Pro)Upgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16hdri-3Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagick++-devUpgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-devUpgrade libimage-magick-q16-perlUpgrade imagemagick-6.q16hdri (Ubuntu Pro)Upgrade libmagick++-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extra (Ubuntu Pro)Upgrade libmagickwand-6-headers (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-7Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6-commonUpgrade libmagickwand-6.q16-dev (Ubuntu Pro)Upgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6Upgrade imagemagick-commonUpgrade libmagickwand-6.q16-devUpgrade libmagickwand-6.q16-6 (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade perlmagickUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6-arch-configUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickwand-devUpgrade libmagick++-6.q16-8Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6 (Ubuntu Pro)Upgrade imagemagickUpgrade libmagick++-6.q16hdri-8 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-devUpgrade libmagickcore-6-headersUpgrade libmagick++-6.q16-devUpgrade libmagickcore-6-arch-config (Ubuntu Pro)Upgrade libmagickcore-6.q16-6 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickwand-6.q16-3Upgrade libmagickcore-devUpgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade imagemagick-6.q16hdriUpgrade libmagick++-6.q16-8 (Ubuntu Pro)Upgrade libmagickwand-6.q16-6Upgrade libmagickcore-6.q16-3-extraUpgrade libimage-magick-perlUpgrade libimage-magick-perl (Ubuntu Pro)Upgrade imagemagick-6-common (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-8Upgrade libmagickcore5-extra (Ubuntu Pro) | Nov 24, 2022 | Aug 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub