ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | Sep 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 6, 2017 |
| Suse | — | Upgrade libMagick++-develUpgrade libGraphicsMagick2Upgrade libMagickWand-6_Q16-1Upgrade ImageMagick-develUpgrade perl-PerlMagickUpgrade perl-GraphicsMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++1Upgrade libMagickCore1-32bitUpgrade libMagickWand1Upgrade ImageMagickUpgrade GraphicsMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade libMagickCore1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand1-32bit | Dec 6, 2017 | Sep 12, 2017 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagick++5Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7 | Jun 19, 2018 | Sep 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub