The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Mar 23, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Mar 23, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 29, 2022 | Mar 23, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 23, 2018 |
| Suse | — | Upgrade libMagickWand1-32bitUpgrade libMagickCore1Upgrade libMagickWand1Upgrade imagemagick-config-6-suseUpgrade libmagickwand-6_q16-1Upgrade perl-perlmagickUpgrade libmagickcore-6_q16-1Upgrade imagemagick-develUpgrade libMagickCore1-32bitUpgrade imagemagickUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-6_q16-3Upgrade imagemagick-config-6-upstreamUpgrade libMagick++1Upgrade libmagick-devel | May 3, 2018 | Mar 23, 2018 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagick++5Upgrade libmagickcore5-extra | Jun 19, 2018 | Mar 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub