ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscape | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade autotraceUpgrade emacs-elUpgrade emacs-commonUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscapeUpgrade emacsUpgrade ImageMagick-perlUpgrade emacs-terminalUpgrade autotrace-develUpgrade ImageMagick-docUpgrade emacs-noxUpgrade inkscape-docsUpgrade ImageMagick | Oct 5, 2022 | Jul 17, 2019 |
| Redhat_linux | — | Upgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade autotrace-debuginfoNo solution existsUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade inkscape-view | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade imagemagick-extraUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickcore-7_q16hdri6Upgrade libmagick-devel-32bitUpgrade imagemagickUpgrade libmagick-develUpgrade libmagickwand-7_q16hdri6Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-6_q16-3Upgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-7_q16hdri4Upgrade imagemagick-config-6-upstreamUpgrade imagemagick-docUpgrade imagemagick-config-7-upstreamUpgrade imagemagick-config-7-suseUpgrade imagemagick-develUpgrade libmagickcore-6_q16-1Upgrade perl-perlmagickUpgrade imagemagick-devel-32bitUpgrade libmagickwand-6_q16-1Upgrade imagemagick-config-6-suseUpgrade libmagickcore-7_q16hdri6-32bit | Jul 30, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade perlmagick (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-6-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro) | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub