The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Mar 23, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Mar 23, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 29, 2022 | Mar 23, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 23, 2018 |
| Suse | — | Upgrade libmagickcore-6_q16-1-32bitUpgrade libMagick++1Upgrade imagemagickUpgrade libmagick-develUpgrade libmagick-6_q16-3Upgrade imagemagick-config-6-upstreamUpgrade libMagickWand1Upgrade imagemagick-develUpgrade libmagickcore-6_q16-1Upgrade perl-perlmagickUpgrade libMagickCore1Upgrade imagemagick-config-6-suseUpgrade libMagickWand1-32bitUpgrade libmagickwand-6_q16-1Upgrade libMagickCore1-32bit | May 3, 2018 | Mar 23, 2018 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-7Upgrade libmagick++5Upgrade libmagickcore5Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-5v5 | Jun 19, 2018 | Mar 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub