In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Dec 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Oct 28, 2020 | Dec 24, 2019 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Dec 24, 2019 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagickUpgrade autotrace-develUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-doc | Apr 1, 2020 | Dec 24, 2019 |
| Debian | — | Upgrade imagemagick | Jan 2, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 29, 2022 | Dec 24, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.91-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 24, 2019 |
| Oracle_linux | — | Upgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade emacs-noxUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagickUpgrade emacs-commonUpgrade ImageMagick-docUpgrade emacs-terminalUpgrade emacs-filesystemUpgrade emacsUpgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade emacs-elUpgrade inkscape | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade inkscapeUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-docNo solution exists | Apr 1, 2020 | Dec 24, 2019 |
| Suse | — | Upgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagickWand-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-develUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-docUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade imagemagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-devel-32bitUpgrade perl-PerlMagickUpgrade libMagick++-develUpgrade libmagick-7_q16hdri4-32bit | Feb 6, 2020 | Dec 24, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-6Upgrade libmagickcore5 (Ubuntu Pro)Upgrade imagemagick-6.q16hdriUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand-6.q16-3Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16hdri-8Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16hdri-3Upgrade imagemagickUpgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16hdri-3-extraUpgrade libmagickwand-6.q16hdri-6Upgrade libmagickwand-6.q16-6Upgrade libmagickwand-6.q16hdri-3Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16hdri-6-extraUpgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16hdri-7Upgrade libmagickcore-6.q16hdri-6Upgrade libmagick++-6.q16-7Upgrade libmagickwand-6.q16-2 | Sep 29, 2020 | Dec 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub