ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Dec 28, 2017 | Dec 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Dec 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Dec 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2017 |
| Suse | — | Upgrade libMagickCore1-32bitUpgrade perl-graphicsmagickUpgrade libmagickwand-6_q16-1Upgrade libMagickWand1Upgrade libMagick++1Upgrade libMagickCore1Upgrade graphicsmagickUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-6_q16-3Upgrade libGraphicsMagick2Upgrade imagemagickUpgrade libMagickWand1-32bitUpgrade perl-perlmagickUpgrade imagemagick-develUpgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-suseUpgrade imagemagick-config-6-upstreamUpgrade libmagick-devel | Feb 4, 2018 | Dec 10, 2017 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-2Upgrade libmagick++5Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagickcore5-extra | Jun 19, 2018 | Dec 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub