In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Oct 1, 2024 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | May 27, 2020 | Sep 1, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.34-11.4.10.0.1.3.0 on Solaris 11.4 | Jun 26, 2019 | Sep 1, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 1, 2018 |
| Suse | — | Upgrade imagemagick-config-7-suseUpgrade libmagick-devel-32bitUpgrade imagemagick-config-6-upstreamUpgrade libmagickwand-7_q16hdri6Upgrade libmagick-7_q16hdri4-32bitUpgrade libmagickcore-6_q16-1Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-develUpgrade libmagick-7_q16hdri4Upgrade imagemagickUpgrade imagemagick-develUpgrade imagemagick-config-6-suseUpgrade imagemagick-extraUpgrade libmagickcore-6_q16-1-32bitUpgrade imagemagick-docUpgrade imagemagick-devel-32bitUpgrade libmagickwand-6_q16-1Upgrade libmagickcore-7_q16hdri6Upgrade libmagick-6_q16-3Upgrade imagemagick-config-7-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade perl-perlmagick | Sep 22, 2018 | Sep 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub