The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade ImageMagick | Jun 23, 2016 | Jun 16, 2016 |
| Centos_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-doc | Jul 22, 2016 | Jun 16, 2016 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Mar 15, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 22, 2016 |
| Huawei Euleros 2_0_sp1 | — | — | Nov 30, 2017 | Mar 15, 2017 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.4.2-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs/gnu-emacs-no-x11 to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs/gnu-emacs-lisp to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs/gnu-emacs-gtk to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs/gnu-emacs-x11 to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3 | Jun 8, 2017 | Mar 15, 2017 |
| Oracle_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++ | Jun 16, 2016 | Jun 16, 2016 |
| Redhat_linux | — | No solution existsUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick | Jul 29, 2016 | Jun 16, 2016 |
| Suse | — | Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade perl-PerlMagickUpgrade libMagick++-develUpgrade libMagickWand1Upgrade ImageMagick-develUpgrade libMagick++-6_Q16-3Upgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade libMagickWand1-32bitUpgrade libMagick++1 | Jul 26, 2016 | Jun 16, 2016 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore4-extraUpgrade imagemagickUpgrade libmagick++4Upgrade libmagickcore4Upgrade libmagick++5Upgrade libmagickcore5-extra | Nov 21, 2016 | Jun 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub