ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Dec 27, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 26, 2017 |
| Suse | — | Upgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade libMagickCore1-32bitUpgrade perl-PerlMagickUpgrade ImageMagickUpgrade libMagickWand1-32bitUpgrade libMagickCore1Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagick++-develUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand1Upgrade libMagick++1 | Mar 10, 2018 | Dec 27, 2017 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extraUpgrade imagemagickUpgrade libmagick++5Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-3-extra | Jun 19, 2018 | Dec 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub