ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Dec 28, 2017 | Dec 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Dec 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Dec 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2017 |
| Suse | — | Upgrade libMagickWand1-32bitUpgrade ImageMagick-develUpgrade libMagick++-develUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade perl-GraphicsMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libGraphicsMagick2Upgrade GraphicsMagickUpgrade libMagickWand1Upgrade libMagickWand-6_Q16-1Upgrade libMagickCore1Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore1-32bitUpgrade perl-PerlMagickUpgrade libMagick++1 | Feb 4, 2018 | Dec 10, 2017 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-5v5Upgrade imagemagickUpgrade libmagick++5Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade libmagickcore5Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7 | Jun 19, 2018 | Dec 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub