ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-doc | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotrace | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade autotraceUpgrade inkscape-viewUpgrade emacs-elUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade emacsUpgrade inkscapeUpgrade inkscape-docsUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade emacs-terminalUpgrade emacs-noxUpgrade ImageMagickUpgrade ImageMagick-devel | Oct 5, 2022 | Jul 17, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-docUpgrade autotrace-develUpgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade ImageMagickNo solution existsUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade inkscapeUpgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade perl-PerlMagickUpgrade ImageMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-devel-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-upstreamUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-docUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickWand-6_Q16-1Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-develUpgrade ImageMagick-develUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-extra | Jul 30, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-7Upgrade imagemagick-6.q16 | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub