In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick | Jan 23, 2024 | Aug 23, 2017 |
| Amazon_linux | — | Upgrade ImageMagick | Mar 20, 2024 | Aug 23, 2017 |
| Debian | — | Upgrade imagemagick | Nov 18, 2017 | Aug 23, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Aug 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Aug 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Aug 23, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 23, 2017 |
| Suse | — | Upgrade libMagickWand1-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade libMagickCore1Upgrade ImageMagickUpgrade ImageMagick-develUpgrade libMagick++-develUpgrade GraphicsMagickUpgrade libMagickCore-6_Q16-1Upgrade libGraphicsMagick2Upgrade perl-GraphicsMagickUpgrade libMagickWand1Upgrade libMagickCore1-32bitUpgrade ImageMagick-config-6-upstreamUpgrade perl-PerlMagickUpgrade libMagickWand-6_Q16-1Upgrade libMagick++1 | Oct 28, 2017 | Aug 23, 2017 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagick++5Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-5v5 | Jun 19, 2018 | Aug 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub