In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 9, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Sep 9, 2018 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagick | Jul 18, 2020 | Sep 9, 2018 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscape | Apr 1, 2020 | Sep 9, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Sep 9, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 9, 2018 |
| Oracle_linux | — | Upgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade autotraceUpgrade inkscape-docsUpgrade emacs-elUpgrade emacs-filesystemUpgrade ImageMagickUpgrade ImageMagick-docUpgrade emacsUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade emacs-noxUpgrade emacs-commonUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++ | Oct 5, 2022 | Sep 11, 2018 |
| Redhat_linux | — | Upgrade inkscape-viewNo solution existsUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++ | Apr 1, 2020 | Sep 9, 2018 |
| Suse | — | Upgrade libMagickCore1Upgrade libmagickcore-6_q16-1Upgrade libGraphicsMagick2Upgrade imagemagick-config-6-suseUpgrade libMagickWand1Upgrade perl-graphicsmagickUpgrade perl-perlmagickUpgrade libMagickWand1-32bitUpgrade imagemagick-develUpgrade libMagickCore1-32bitUpgrade imagemagickUpgrade imagemagick-config-6-upstreamUpgrade graphicsmagickUpgrade libmagick-develUpgrade libMagick++1Upgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-6_q16-1 | Sep 25, 2018 | Sep 9, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extraUpgrade imagemagickUpgrade libmagick++-6.q16-7Upgrade libmagick++5 | Oct 17, 2018 | Sep 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub