Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Sep 20, 2017 | Dec 13, 2016 |
| Debian | — | Upgrade imagemagick | Mar 31, 2017 | Aug 25, 2016 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Dec 13, 2016 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.5.0-0.175.3.11.0.5.0 on Solaris 11.3 | May 29, 2017 | Dec 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 28, 2016 |
| Suse | — | Upgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1Upgrade libMagick++-develUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade libMagickWand1-32bitUpgrade perl-PerlMagickUpgrade libMagickCore1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade libMagickCore1Upgrade libMagick++1Upgrade libMagickCore-6_Q16-1-32bit | Nov 3, 2016 | Aug 15, 2016 |
| Ubuntu | — | Upgrade libmagickcore5-extraUpgrade libmagick++4Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagick++5Upgrade libmagickcore4Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore4-extraUpgrade libmagickcore5Upgrade libmagick++-6.q16-5v5 | Nov 21, 2016 | Nov 21, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub