ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 1, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 28, 2020 | Jul 1, 2019 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Jul 1, 2019 |
| Centos_linux | — | Upgrade inkscape-docsUpgrade ImageMagickUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfo | Apr 1, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 28, 2019 | Jul 1, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 1, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-develUpgrade emacsUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade inkscapeUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade emacs-commonUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade emacs-terminalUpgrade emacs-elUpgrade emacs-noxUpgrade ImageMagick-perl | Oct 5, 2022 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscapeUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade autotrace-debuginfoNo solution existsUpgrade autotrace-devel | Apr 1, 2020 | Jul 1, 2019 |
| Suse | — | Upgrade perl-PerlMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagickUpgrade ImageMagick-extraUpgrade libmagick-devel-32bitUpgrade libMagick++-develUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-docUpgrade ImageMagick-config-7-SUSEUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-7_Q16HDRI4Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagickWand-6_Q16-1Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-6_Q16-3Upgrade imagemagick-config-7-upstreamUpgrade ImageMagick-develUpgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-devel-32bit | Jul 30, 2019 | Jul 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub