ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Oct 28, 2020 | May 8, 2018 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php-pecl-imagick | Jul 18, 2020 | May 8, 2018 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade autotraceUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-debuginfo | Apr 1, 2020 | May 8, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | May 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | May 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | May 8, 2018 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade emacs-elUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade emacs-noxUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade emacs-filesystemUpgrade autotraceUpgrade ImageMagick-docUpgrade emacsUpgrade inkscapeUpgrade inkscape-viewUpgrade inkscape-docsUpgrade emacs-terminalUpgrade ImageMagick | Oct 5, 2022 | Mar 24, 2018 |
| Redhat_linux | — | Upgrade inkscape-docsUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade autotraceNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-devel | Apr 1, 2020 | May 8, 2018 |
| Suse | — | Upgrade ImageMagick-extraUpgrade ImageMagick-docUpgrade libMagick++-7_Q16HDRI4Upgrade libMagick++1Upgrade ImageMagick-develUpgrade libgraphicsmagick-develUpgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-6_Q16-1Upgrade imagemagick-devel-32bitUpgrade libMagickWand1-32bitUpgrade libgraphicsmagick3-configUpgrade libgraphicsmagickwand-q16-2Upgrade libgraphicsmagick-q16-3Upgrade GraphicsMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade perl-GraphicsMagickUpgrade imagemagick-config-7-upstreamUpgrade libmagick-devel-32bitUpgrade ImageMagick-config-6-SUSEUpgrade perl-PerlMagickUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libGraphicsMagick2Upgrade libMagick++-develUpgrade graphicsmagick-develUpgrade libgraphicsmagick-q16-12Upgrade libMagickWand1Upgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-7_Q16HDRI6 | Jun 30, 2018 | May 8, 2018 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagick++5Upgrade libmagickcore5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-7 | Jun 19, 2018 | May 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub