ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 1, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick | Oct 28, 2020 | Jul 1, 2019 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Jul 1, 2019 |
| Centos_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade autotrace-develUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade inkscape-docs | Apr 1, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 28, 2019 | Jul 1, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 1, 2019 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade emacsUpgrade ImageMagick-docUpgrade emacs-filesystemUpgrade inkscapeUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade emacs-noxUpgrade emacs-elUpgrade autotrace-develUpgrade emacs-terminal | Oct 5, 2022 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade autotrace-develNo solution existsUpgrade ImageMagickUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-c++ | Apr 1, 2020 | Jul 1, 2019 |
| Suse | — | Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade libmagick-7_q16hdri4-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade imagemagick-config-7-upstreamUpgrade imagemagick-devel-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libMagick++-develUpgrade perl-PerlMagickUpgrade ImageMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-docUpgrade libmagick-devel-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-extraUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-7-SUSE | Jul 30, 2019 | Jul 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub