ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Oct 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-devel | Oct 28, 2020 | Oct 14, 2019 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Oct 14, 2019 |
| Centos_linux | — | Upgrade autotraceUpgrade ImageMagick-perlUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++ | Apr 1, 2020 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade emacs-commonUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade emacs-noxUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade emacsUpgrade emacs-filesystemUpgrade ImageMagickUpgrade emacs-elUpgrade inkscape-docsUpgrade emacs-terminalUpgrade inkscape | Oct 5, 2022 | Jul 14, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade autotrace-develNo solution existsUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade ImageMagick-c++ | Apr 1, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub