ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Oct 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-devel | Oct 28, 2020 | Oct 14, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Oct 14, 2019 |
| Centos_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade autotraceUpgrade inkscapeUpgrade autotrace-develUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Apr 1, 2020 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade inkscapeUpgrade emacs-filesystemUpgrade emacs-elUpgrade ImageMagickUpgrade inkscape-docsUpgrade emacs-terminalUpgrade inkscape-viewUpgrade emacsUpgrade ImageMagick-develUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade emacs-noxUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade autotrace | Oct 5, 2022 | Jul 14, 2019 |
| Redhat_linux | — | Upgrade autotraceUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-perlNo solution existsUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade autotrace-devel | Apr 1, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub