coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++ | Oct 28, 2020 | Aug 18, 2019 |
| Amazon_linux | — | Upgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Aug 18, 2019 |
| Centos_linux | — | Upgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade inkscapeUpgrade inkscape-viewUpgrade autotrace-debuginfo | Apr 1, 2020 | Aug 18, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 18, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 18, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-perlUpgrade inkscapeUpgrade autotraceUpgrade emacs-noxUpgrade emacs-terminalUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade emacsUpgrade ImageMagickUpgrade inkscape-viewUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade emacs-elUpgrade emacs-commonUpgrade ImageMagick-c++-devel | Oct 5, 2022 | Apr 27, 2019 |
| Redhat_linux | — | Upgrade autotrace-develNo solution existsUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perl | Apr 1, 2020 | Aug 18, 2019 |
| Suse | — | Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-extraUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-develUpgrade imagemagick-devel-32bitUpgrade ImageMagick-docUpgrade ImageMagick-config-7-SUSEUpgrade imagemagick-config-7-upstreamUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagickWand-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-devel | Oct 26, 2019 | Aug 18, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade imagemagick-6.q16Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-3Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade imagemagickUpgrade libmagick++-dev (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extra | Nov 15, 2019 | Aug 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub