ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Oct 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-doc | Oct 28, 2020 | Oct 14, 2019 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Oct 14, 2019 |
| Centos_linux | — | Upgrade inkscapeUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade autotrace-develUpgrade autotrace-debuginfoUpgrade ImageMagick-c++ | Apr 1, 2020 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade emacs-terminalUpgrade emacsUpgrade inkscapeUpgrade ImageMagick-develUpgrade emacs-elUpgrade emacs-filesystemUpgrade ImageMagickUpgrade inkscape-viewUpgrade emacs-commonUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade emacs-noxUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade autotrace | Oct 5, 2022 | Jul 14, 2019 |
| Redhat_linux | — | No solution existsUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade inkscape-viewUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfo | Apr 1, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub