ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagickUpgrade inkscape-debuginfo | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade emacs-commonUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade emacsUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade inkscapeUpgrade emacs-noxUpgrade inkscape-docsUpgrade ImageMagickUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade emacs-el | Oct 5, 2022 | Jul 17, 2019 |
| Redhat_linux | — | Upgrade autotrace-debuginfoUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-perlNo solution existsUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscape-view | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade imagemagick-devel-32bitUpgrade imagemagick-config-7-suseUpgrade libmagick-7_q16hdri4Upgrade imagemagick-config-6-suseUpgrade imagemagick-config-6-upstreamUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-docUpgrade libmagickwand-6_q16-1Upgrade imagemagick-config-7-upstreamUpgrade imagemagick-develUpgrade libmagickcore-6_q16-1Upgrade perl-perlmagickUpgrade libmagick-devel-32bitUpgrade imagemagick-extraUpgrade libmagick-develUpgrade imagemagickUpgrade libmagick-6_q16-3Upgrade libmagick-7_q16hdri4-32bitUpgrade libmagickwand-7_q16hdri6Upgrade libmagickcore-7_q16hdri6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickcore-6_q16-1-32bit | Jul 30, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-8Upgrade imagemagick-6.q16Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-3Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade imagemagick | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub