ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perl | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagick-devel | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade ImageMagickUpgrade emacs-elUpgrade emacsUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade inkscapeUpgrade emacs-filesystemUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade autotrace-develUpgrade emacs-commonUpgrade emacs-nox | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade autotrace-develUpgrade ImageMagick-c++-develNo solution existsUpgrade autotraceUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-doc | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4Upgrade libmagickcore-7_q16hdri6Upgrade libmagick-6_q16-3Upgrade libmagickwand-6_q16-1Upgrade imagemagick-devel-32bitUpgrade libmagick-devel-32bitUpgrade imagemagick-config-6-suseUpgrade imagemagick-extraUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-develUpgrade imagemagick-config-6-upstreamUpgrade imagemagickUpgrade libmagickcore-6_q16-1Upgrade imagemagick-config-7-upstreamUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-config-7-suseUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-develUpgrade perl-perlmagickUpgrade imagemagick-doc | Jul 30, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro) | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub