A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Nov 18, 2017 | Oct 2, 2017 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.9.19-0.175.3.26.0.4.0 on Solaris 11.3 | Nov 30, 2017 | Oct 2, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 25, 2017 |
| Suse | — | Upgrade perl-PerlMagickUpgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade libMagick++-develUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-6_Q16-1 | Dec 20, 2017 | Oct 2, 2017 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagick++5Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7 | Jun 19, 2018 | Oct 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub