ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 28, 2020 | May 8, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | May 8, 2018 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade inkscape-docsUpgrade inkscapeUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-devel | Apr 1, 2020 | May 8, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | May 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | May 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | May 8, 2018 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade emacs-elUpgrade autotraceUpgrade emacs-filesystemUpgrade emacsUpgrade emacs-terminalUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-docUpgrade inkscape-view | Oct 5, 2022 | Mar 24, 2018 |
| Redhat_linux | — | Upgrade autotrace-debuginfoUpgrade autotraceUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develNo solution existsUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade inkscapeUpgrade ImageMagickUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade autotrace-devel | Apr 1, 2020 | May 8, 2018 |
| Suse | — | Upgrade imagemagick-devel-32bitUpgrade libMagickCore1Upgrade libMagickWand1-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libgraphicsmagick3-configUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-6_Q16-1Upgrade libmagick-7_q16hdri4-32bitUpgrade libgraphicsmagick-q16-3Upgrade ImageMagick-docUpgrade libMagickCore1-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-extraUpgrade libgraphicsmagickwand-q16-2Upgrade ImageMagick-develUpgrade libgraphicsmagick-develUpgrade libMagick++1Upgrade ImageMagick-config-6-SUSEUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade ImageMagickUpgrade libMagickWand1Upgrade libMagickCore-7_Q16HDRI6Upgrade GraphicsMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade graphicsmagick-develUpgrade libgraphicsmagick-q16-12Upgrade ImageMagick-config-6-upstreamUpgrade libGraphicsMagick2Upgrade perl-GraphicsMagickUpgrade libMagickWand-6_Q16-1Upgrade imagemagick-config-7-upstreamUpgrade libMagick++-develUpgrade libMagick++-6_Q16-3Upgrade perl-PerlMagick | Jun 30, 2018 | May 8, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-2 | Jun 19, 2018 | May 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub