coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-devel | Oct 28, 2020 | Aug 18, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Aug 18, 2019 |
| Centos_linux | — | Upgrade autotrace-develUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick | Apr 1, 2020 | Aug 18, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 18, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 18, 2019 |
| Oracle_linux | — | Upgrade autotraceUpgrade emacsUpgrade ImageMagickUpgrade emacs-noxUpgrade inkscapeUpgrade emacs-filesystemUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade emacs-terminalUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade emacs-elUpgrade ImageMagick-c++Upgrade emacs-common | Oct 5, 2022 | Apr 27, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-perlUpgrade autotraceUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade autotrace-debuginfoNo solution exists | Apr 1, 2020 | Aug 18, 2019 |
| Suse | — | Upgrade libmagickwand-6_q16-1Upgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-suseUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-develUpgrade imagemagick-extraUpgrade imagemagick-config-6-upstreamUpgrade perl-perlmagickUpgrade imagemagick-config-7-upstreamUpgrade libmagick-devel-32bitUpgrade libmagickcore-7_q16hdri6Upgrade libmagick-develUpgrade libmagick-6_q16-3Upgrade libmagick-7_q16hdri4-32bitUpgrade imagemagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-docUpgrade imagemagick-devel-32bitUpgrade libmagick-7_q16hdri4Upgrade imagemagick-config-7-suse | Oct 26, 2019 | Aug 18, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-5v5Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagickUpgrade libmagick++-6.q16-8Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro) | Nov 15, 2019 | Aug 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub