In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Oct 1, 2024 | Mar 7, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 28, 2020 | Mar 7, 2019 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Mar 7, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade inkscape-docs | Apr 1, 2020 | Mar 7, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Mar 7, 2019 |
| Freebsd | — | Upgrade ImageMagick6Upgrade ImageMagick6-nox11Upgrade ImageMagick7-nox11Upgrade ImageMagick7 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 30, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Jul 2, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jun 27, 2019 | Mar 7, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Mar 7, 2019 |
| Oracle_linux | — | Upgrade emacs-terminalUpgrade inkscape-docsUpgrade emacs-elUpgrade emacs-noxUpgrade ImageMagickUpgrade emacs-filesystemUpgrade emacsUpgrade inkscapeUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade emacs-commonUpgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade autotrace-devel | Oct 5, 2022 | Jan 17, 2019 |
| Redhat_linux | — | Upgrade autotrace-develUpgrade ImageMagickNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade ImageMagick-perl | Apr 1, 2020 | Mar 7, 2019 |
| Suse | — | Upgrade ImageMagick-extraUpgrade perl-PerlMagickUpgrade ImageMagick-docUpgrade libMagick++-develUpgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade libMagickCore1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade imagemagick-config-7-upstreamUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickWand-6_Q16-1Upgrade libMagickWand1Upgrade libGraphicsMagick2Upgrade libMagickWand1-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade perl-GraphicsMagickUpgrade GraphicsMagickUpgrade libMagick++1Upgrade libmagick-devel-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libMagick++-7_Q16HDRI4Upgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-devel-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade libMagickCore1 | Apr 1, 2019 | Mar 7, 2019 |
| Ubuntu | — | Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16-8Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro) | Jun 25, 2019 | Mar 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub