In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Sep 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 8, 2017 |
| Suse | — | Upgrade libMagickCore1Upgrade libMagickCore-6_Q16-1Upgrade libMagickCore1-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagick++-6_Q16-3Upgrade perl-PerlMagickUpgrade libMagick++1Upgrade libMagickWand1-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libMagickWand1 | Jan 16, 2018 | Sep 12, 2017 |
| Ubuntu | — | Upgrade libmagick++5Upgrade imagemagick-6.q16Upgrade libmagickcore5Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7 | Jun 19, 2018 | Sep 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub