ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 1, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick | Oct 28, 2020 | Jul 1, 2019 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 1, 2019 |
| Centos_linux | — | Upgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade ImageMagickUpgrade inkscape-docs | Apr 1, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 28, 2019 | Jul 1, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 1, 2019 |
| Oracle_linux | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade emacs-terminalUpgrade ImageMagick-c++Upgrade emacs-elUpgrade autotrace-develUpgrade emacs-noxUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade autotraceUpgrade inkscapeUpgrade emacs-filesystemUpgrade ImageMagick-develUpgrade emacs | Oct 5, 2022 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-c++-develNo solution existsUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade autotrace-debuginfo | Apr 1, 2020 | Jul 1, 2019 |
| Suse | — | Upgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-devel-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagick++-6_Q16-3Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickWand-6_Q16-1Upgrade perl-PerlMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-6_Q16-1Upgrade ImageMagickUpgrade libMagick++-develUpgrade ImageMagick-extraUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-doc | Jul 30, 2019 | Jul 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub