ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | Sep 11, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Sep 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 31, 2017 |
| Suse | — | Upgrade libMagick++-develUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1Upgrade libMagickCore-6_Q16-1Upgrade GraphicsMagickUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++1Upgrade perl-GraphicsMagickUpgrade ImageMagick-develUpgrade libMagickWand1-32bitUpgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade libGraphicsMagick2Upgrade ImageMagick-config-6-SUSEUpgrade perl-PerlMagickUpgrade libMagickCore1-32bit | Jan 10, 2018 | Sep 11, 2017 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-5v5Upgrade libmagick++5Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5 | Jun 19, 2018 | Sep 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub