ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-devel | Oct 28, 2020 | May 8, 2018 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | May 8, 2018 |
| Centos_linux | — | Upgrade autotraceUpgrade inkscape-viewUpgrade inkscapeUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-devel | Apr 1, 2020 | May 8, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | May 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | May 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | May 8, 2018 |
| Oracle_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade emacs-noxUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade autotrace-develUpgrade emacs-elUpgrade ImageMagick-perlUpgrade autotraceUpgrade emacs-terminalUpgrade inkscape-viewUpgrade inkscape-docsUpgrade emacs-filesystemUpgrade emacsUpgrade ImageMagick-docUpgrade ImageMagickUpgrade inkscape | Oct 5, 2022 | Mar 24, 2018 |
| Redhat_linux | — | Upgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagick-c++-develNo solution existsUpgrade ImageMagick-develUpgrade inkscape-debuginfo | Apr 1, 2020 | May 8, 2018 |
| Suse | — | Upgrade libgraphicsmagick3-configUpgrade libgraphicsmagick-q16-3Upgrade libMagickCore1Upgrade libMagickCore-6_Q16-1Upgrade libMagickCore1-32bitUpgrade imagemagick-devel-32bitUpgrade libgraphicsmagick-develUpgrade libMagick++1Upgrade ImageMagick-develUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-extraUpgrade libMagickWand1-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libgraphicsmagickwand-q16-2Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-docUpgrade libMagick++-7_Q16HDRI4Upgrade libMagick++-develUpgrade GraphicsMagickUpgrade ImageMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade perl-PerlMagickUpgrade perl-GraphicsMagickUpgrade imagemagick-config-7-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libgraphicsmagick-q16-12Upgrade graphicsmagick-develUpgrade libMagickWand1Upgrade libGraphicsMagick2Upgrade libMagickWand-6_Q16-1Upgrade libmagick-devel-32bitUpgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-6_Q16-3 | Jun 30, 2018 | May 8, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagickcore5Upgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16 | Jun 19, 2018 | May 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub