The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Nov 27, 2016 | Nov 17, 2016 |
| Freebsd | — | Upgrade ImageMagick7-nox11Upgrade ImageMagick7 | Dec 5, 2016 | Dec 4, 2016 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.6.7-0.175.3.17.0.1.0 on Solaris 11.3 | May 29, 2017 | Feb 15, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 7, 2016 |
| Suse | — | Upgrade libMagickCore1Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-develUpgrade libMagickCore1-32bitUpgrade libMagick++1Upgrade perl-GraphicsMagickUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1Upgrade libMagick++-develUpgrade libMagick++-6_Q16-3Upgrade perl-PerlMagickUpgrade libGraphicsMagick2Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagickUpgrade GraphicsMagickUpgrade libMagickWand1-32bitUpgrade libMagickWand-6_Q16-1 | Nov 17, 2016 | Nov 17, 2016 |
| Ubuntu | — | Upgrade libmagick++5Upgrade libmagick++4Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade libmagickcore4Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5Upgrade libmagickcore5-extraUpgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore4-extra | Nov 30, 2016 | Nov 17, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub