In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Sep 8, 2020 | Mar 1, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.9.19-0.175.3.26.0.4.0 on Solaris 11.3 | Apr 18, 2018 | Mar 1, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 1, 2018 |
| Suse | — | Upgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagickUpgrade libMagick++-develUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-devel | Apr 4, 2018 | Mar 1, 2018 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++5Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7 | Jun 19, 2018 | Mar 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub