ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Oct 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick | Oct 28, 2020 | Oct 14, 2019 |
| Amazon_linux | — | Upgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Oct 14, 2019 |
| Centos_linux | — | Upgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-devel | Apr 1, 2020 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade emacs-commonUpgrade emacs-noxUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade emacsUpgrade inkscapeUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade emacs-elUpgrade inkscape-docsUpgrade ImageMagick | Oct 5, 2022 | Jul 14, 2019 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade autotraceUpgrade ImageMagick-develUpgrade inkscapeUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-docNo solution existsUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade autotrace-devel | Apr 1, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub