Name: CVE-2021-3574: Missing Release of Memory after Effective Lifetime
Published: 2022-08-26T00:00:00.000Z
Keywords: CVE, CVE-2021-3574, CWE-401, CVSS 3.3, EPSS 0.00447

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.

CVSS Details

CVSS 3.1 Base Score: 3.3
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	View advisory ↗View advisory ↗	alpine-linux-upgrade-imagemagick	Aug 22, 2024	Aug 26, 2022
Amazon Linux Ami 2	View advisory ↗	amazon-linux-ami-2-upgrade-imagemagickamazon-linux-ami-2-upgrade-imagemagick-camazon-linux-ami-2-upgrade-imagemagick-c-develamazon-linux-ami-2-upgrade-imagemagick-debuginfoamazon-linux-ami-2-upgrade-imagemagick-develamazon-linux-ami-2-upgrade-imagemagick-docamazon-linux-ami-2-upgrade-imagemagick-perl	Mar 7, 2023	Aug 26, 2022
Amazon_linux	—	amazon-linux-upgrade-imagemagick	Mar 7, 2023	Aug 26, 2022
Debian	View advisory ↗	debian-upgrade-imagemagick	Mar 13, 2023	Aug 26, 2022
Suse	—	suse-upgrade-imagemagicksuse-upgrade-imagemagick-config-7-susesuse-upgrade-imagemagick-config-7-upstreamsuse-upgrade-imagemagick-develsuse-upgrade-imagemagick-devel-32bitsuse-upgrade-imagemagick-docsuse-upgrade-imagemagick-extrasuse-upgrade-libmagick-7_q16hdri4suse-upgrade-libmagick-7_q16hdri4-32bitsuse-upgrade-libmagick-develsuse-upgrade-libmagick-devel-32bitsuse-upgrade-libmagickcore-7_q16hdri6suse-upgrade-libmagickcore-7_q16hdri6-32bitsuse-upgrade-libmagickwand-7_q16hdri6suse-upgrade-libmagickwand-7_q16hdri6-32bitsuse-upgrade-perl-perlmagick	Oct 26, 2022	Aug 26, 2022
Ubuntu	View advisory ↗	ubuntu-upgrade-imagemagickubuntu-upgrade-imagemagick-6-commonubuntu-upgrade-imagemagick-6-q16ubuntu-upgrade-imagemagick-6-q16hdriubuntu-upgrade-imagemagick-commonubuntu-upgrade-libimage-magick-perlubuntu-upgrade-libimage-magick-q16-perlubuntu-upgrade-libmagick-6-q16-8ubuntu-upgrade-libmagick-6-q16-devubuntu-upgrade-libmagick-6-q16hdri-8ubuntu-upgrade-libmagick-devubuntu-upgrade-libmagickcore-6-arch-configubuntu-upgrade-libmagickcore-6-headersubuntu-upgrade-libmagickcore-6-q16-6ubuntu-upgrade-libmagickcore-6-q16-6-extraubuntu-upgrade-libmagickcore-6-q16-devubuntu-upgrade-libmagickcore-6-q16hdri-6ubuntu-upgrade-libmagickcore-devubuntu-upgrade-libmagickwand-6-q16-6ubuntu-upgrade-libmagickwand-6-q16-devubuntu-upgrade-libmagickwand-devubuntu-upgrade-perlmagick	Nov 24, 2022	Aug 26, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub