In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Dec 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick | Oct 28, 2020 | Dec 24, 2019 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Dec 24, 2019 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade inkscape-view | Apr 1, 2020 | Dec 24, 2019 |
| Debian | — | Upgrade imagemagick | Jan 2, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 29, 2022 | Dec 24, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.91-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 24, 2019 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscapeUpgrade emacs-elUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade emacsUpgrade emacs-filesystemUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade emacs-noxUpgrade ImageMagickUpgrade autotrace | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade autotraceUpgrade autotrace-develNo solution existsUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade inkscape-docs | Apr 1, 2020 | Dec 24, 2019 |
| Suse | — | Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-develUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagickCore-6_Q16-1Upgrade perl-PerlMagickUpgrade libMagick++-develUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-docUpgrade imagemagick-devel-32bitUpgrade ImageMagick-extraUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-7_Q16HDRI4 | Feb 6, 2020 | Dec 24, 2019 |
| Ubuntu | — | Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16hdri-3Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade imagemagickUpgrade libmagickwand-6.q16-3Upgrade imagemagick-6.q16hdriUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-8Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-6.q16hdri-3-extraUpgrade libmagick++-6.q16hdri-7Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16-7Upgrade libmagickwand-6.q16-6Upgrade libmagickwand-6.q16hdri-6Upgrade libmagickwand-6.q16hdri-3Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16hdri-6-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickwand-6.q16-2Upgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro) | Sep 29, 2020 | Dec 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub