ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | Oct 4, 2017 |
| Huawei Euleros 2_0_sp1 | — | — | Nov 30, 2017 | Oct 4, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 30, 2017 | Oct 4, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 3, 2017 |
| Suse | — | Upgrade graphicsmagickUpgrade libMagickCore1Upgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-upstreamUpgrade libmagickcore-6_q16-1-32bitUpgrade libMagickCore1-32bitUpgrade libmagick-develUpgrade imagemagick-develUpgrade imagemagickUpgrade libMagick++1Upgrade perl-graphicsmagickUpgrade libMagickWand1Upgrade libmagickwand-6_q16-1Upgrade libMagickWand1-32bitUpgrade libGraphicsMagick2Upgrade perl-perlmagickUpgrade imagemagick-config-6-suse | Mar 20, 2018 | Oct 4, 2017 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagick++5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-7 | Jun 19, 2018 | Oct 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub