Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Sep 24, 2007 |
| Freebsd | — | Upgrade ImageMagick-nox11Upgrade ImageMagick | Dec 10, 2025 | Oct 10, 2007 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Oct 30, 2017 | Sep 24, 2007 |
| Suse | — | Upgrade libMagickWand-7_Q16HDRI10Upgrade libMagickCore-7_Q16HDRI10Upgrade ImageMagick-config-7-upstream-openUpgrade ImageMagickUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-config-7-upstream-websafeUpgrade ImageMagick-develUpgrade libMagick++-develUpgrade libMagick++-7_Q16HDRI5Upgrade ImageMagick-extraUpgrade ImageMagick-config-7-upstream-limitedUpgrade libMagickCore1Upgrade ImageMagick-docUpgrade libMagickWand1-32bitUpgrade perl-PerlMagickUpgrade libMagick++1Upgrade libMagickCore1-32bitUpgrade ImageMagick-config-7-upstream-secureUpgrade libMagickWand1 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libmagick9 | Nov 8, 2024 | Sep 24, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub