ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade inkscapeUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagickUpgrade autotrace-debuginfo | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade emacs-filesystemUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade inkscape-viewUpgrade emacs-elUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade emacs-terminalUpgrade emacs-commonUpgrade emacsUpgrade emacs-noxUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagickUpgrade inkscape | Oct 5, 2022 | Jul 17, 2019 |
| Redhat_linux | — | Upgrade inkscape-debuginfoUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade autotrace-debuginfoNo solution existsUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade inkscape-docs | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade imagemagick-config-7-upstreamUpgrade libMagick++-7_Q16HDRI4Upgrade perl-PerlMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-6_Q16-3Upgrade imagemagick-devel-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagick-devel-32bitUpgrade ImageMagick-extraUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand-6_Q16-1Upgrade libMagick++-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagickWand-7_Q16HDRI6 | Jul 30, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3 | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub