There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 6, 2018 |
| Debian | — | Upgrade imagemagick | Oct 14, 2018 | Sep 6, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 6, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 6, 2018 |
| Suse | — | Upgrade libMagickWand1Upgrade graphicsmagick-develUpgrade ImageMagick-docUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1-32bitUpgrade imagemagick-config-7-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagickUpgrade libMagick++1Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-extraUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libgraphicsmagick-q16-12Upgrade libMagick++-7_Q16HDRI4Upgrade perl-GraphicsMagickUpgrade libMagickCore1-32bitUpgrade libMagickWand-6_Q16-1Upgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-7_Q16HDRI6Upgrade libGraphicsMagick2Upgrade libgraphicsmagick3-configUpgrade libmagick-devel-32bitUpgrade perl-PerlMagickUpgrade libgraphicsmagickwand-q16-2Upgrade libMagick++-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-develUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-devel-32bitUpgrade GraphicsMagickUpgrade libgraphicsmagick-q16-3Upgrade libMagickCore1Upgrade libgraphicsmagick-devel | Sep 18, 2018 | Sep 6, 2018 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2Upgrade libmagick++5Upgrade libmagickcore-6.q16-3Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-8 | Oct 17, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub