In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Oct 1, 2024 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | May 27, 2020 | Sep 1, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.34-11.4.10.0.1.3.0 on Solaris 11.4 | Jun 26, 2019 | Sep 1, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 1, 2018 |
| Suse | — | Upgrade libMagickCore-6_Q16-1Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-develUpgrade libmagick-devel-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-docUpgrade libMagick++-develUpgrade ImageMagick-config-6-upstreamUpgrade imagemagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-extraUpgrade ImageMagickUpgrade imagemagick-config-7-upstreamUpgrade perl-PerlMagickUpgrade libMagick++-7_Q16HDRI4 | Sep 22, 2018 | Sep 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub