There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 6, 2018 |
| Debian | — | Upgrade imagemagick | Oct 14, 2018 | Sep 6, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 6, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 6, 2018 |
| Suse | — | Upgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-develUpgrade libmagick-devel-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade ImageMagick-config-7-SUSEUpgrade libMagick++1Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-6_Q16-1Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libgraphicsmagickwand-q16-2Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-extraUpgrade libMagickWand1-32bitUpgrade perl-PerlMagickUpgrade GraphicsMagickUpgrade graphicsmagick-develUpgrade ImageMagick-config-6-upstreamUpgrade libgraphicsmagick3-configUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagickWand-7_Q16HDRI6Upgrade libMagickWand1Upgrade ImageMagickUpgrade ImageMagick-docUpgrade libGraphicsMagick2Upgrade libgraphicsmagick-develUpgrade perl-GraphicsMagickUpgrade ImageMagick-config-6-SUSEUpgrade libgraphicsmagick-q16-12Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickCore1-32bitUpgrade libMagickWand-6_Q16-1Upgrade imagemagick-config-7-upstreamUpgrade libMagickCore1Upgrade libgraphicsmagick-q16-3Upgrade imagemagick-devel-32bit | Sep 18, 2018 | Sep 6, 2018 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-6Upgrade imagemagickUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++5Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-3 | Oct 17, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub