In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 9, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Oct 28, 2020 | Sep 9, 2018 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Sep 9, 2018 |
| Centos_linux | — | Upgrade ImageMagickUpgrade inkscapeUpgrade inkscape-viewUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-devel | Apr 1, 2020 | Sep 9, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Sep 9, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 9, 2018 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade autotrace-develUpgrade inkscapeUpgrade emacsUpgrade ImageMagick-c++Upgrade autotraceUpgrade ImageMagick-c++-develUpgrade emacs-elUpgrade ImageMagickUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade inkscape-docsUpgrade ImageMagick-doc | Oct 5, 2022 | Sep 11, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade inkscapeUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscape-viewNo solution existsUpgrade ImageMagickUpgrade autotrace-debuginfoUpgrade inkscape-docs | Apr 1, 2020 | Sep 9, 2018 |
| Suse | — | Upgrade libmagick-6_q16-3Upgrade libMagick++1Upgrade libmagick-develUpgrade libmagickwand-6_q16-1Upgrade graphicsmagickUpgrade libmagickcore-6_q16-1-32bitUpgrade imagemagick-config-6-upstreamUpgrade libMagickCore1-32bitUpgrade libMagickWand1Upgrade imagemagick-config-6-suseUpgrade imagemagickUpgrade perl-graphicsmagickUpgrade libMagickWand1-32bitUpgrade perl-perlmagickUpgrade libGraphicsMagick2Upgrade libMagickCore1Upgrade libmagickcore-6_q16-1Upgrade imagemagick-devel | Sep 25, 2018 | Sep 9, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagick++5Upgrade imagemagickUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-3 | Oct 17, 2018 | Sep 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub