Name: CVE-2021-3574: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2022-08-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-3574, CWE-401, CVSS 3.3, EPSS 0.00033

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.

CVSS Details

CVSS 3.1 Base Score: 3.3
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade imagemagick	Aug 22, 2024	Aug 26, 2022
Amazon Linux Ami 2	—	Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-c++-devel	Mar 7, 2023	Aug 26, 2022
Amazon_linux	—	Upgrade ImageMagick	Mar 7, 2023	Aug 26, 2022
Debian	—	Upgrade imagemagick	Mar 13, 2023	Aug 26, 2022
Suse	—	Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagickUpgrade ImageMagick-extraUpgrade ImageMagick-docUpgrade libMagick++-develUpgrade perl-PerlMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-devel-32bitUpgrade ImageMagick-develUpgrade imagemagick-config-7-upstream	Oct 26, 2022	Aug 26, 2022
Ubuntu	—	Upgrade libmagick++-6.q16hdri-8Upgrade libmagickcore-6.q16hdri-6Upgrade perlmagickUpgrade libmagickcore-devUpgrade libmagickwand-devUpgrade libmagickcore-6-headersUpgrade libmagickcore-6.q16-devUpgrade libmagick++-devUpgrade libmagickcore-6-arch-configUpgrade imagemagick-6-commonUpgrade imagemagickUpgrade libimage-magick-perlUpgrade libmagick++-6.q16-devUpgrade imagemagick-commonUpgrade libmagickwand-6.q16-devUpgrade libmagickcore-6.q16-6Upgrade libimage-magick-q16-perlUpgrade imagemagick-6.q16Upgrade imagemagick-6.q16hdriUpgrade libmagickwand-6.q16-6Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-6-extra	Nov 24, 2022	Aug 26, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence