ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Dec 28, 2017 | Dec 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Dec 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Dec 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2017 |
| Suse | — | Upgrade imagemagickUpgrade libMagickWand1-32bitUpgrade perl-perlmagickUpgrade imagemagick-config-6-upstreamUpgrade libmagick-develUpgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-suseUpgrade imagemagick-develUpgrade libMagickWand1Upgrade libmagick-6_q16-3Upgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade libmagickwand-6_q16-1Upgrade libGraphicsMagick2Upgrade libMagick++1Upgrade libmagickcore-6_q16-1-32bitUpgrade perl-graphicsmagickUpgrade graphicsmagick | Feb 4, 2018 | Dec 10, 2017 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++5Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extraUpgrade libmagickcore5Upgrade libmagick++-6.q16-7 | Jun 19, 2018 | Dec 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub