In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Oct 1, 2024 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | May 27, 2020 | Sep 1, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.34-11.4.10.0.1.3.0 on Solaris 11.4 | Jun 26, 2019 | Sep 1, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 1, 2018 |
| Suse | — | Upgrade perl-perlmagickUpgrade libmagick-6_q16-3Upgrade imagemagick-docUpgrade imagemagick-config-7-upstreamUpgrade imagemagick-devel-32bitUpgrade libmagickcore-7_q16hdri6Upgrade libmagickwand-6_q16-1Upgrade imagemagick-config-6-suseUpgrade imagemagick-extraUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4Upgrade libmagick-devel-32bitUpgrade imagemagick-config-6-upstreamUpgrade libmagick-develUpgrade libmagickwand-7_q16hdri6Upgrade imagemagickUpgrade imagemagick-develUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-7-suseUpgrade libmagickcore-6_q16-1Upgrade libmagickcore-7_q16hdri6-32bit | Sep 22, 2018 | Sep 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub