In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Oct 1, 2024 | Mar 7, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-perl | Oct 28, 2020 | Mar 7, 2019 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Mar 7, 2019 |
| Centos_linux | — | Upgrade autotraceUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade autotrace-debuginfo | Apr 1, 2020 | Mar 7, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Mar 7, 2019 |
| Freebsd | — | Upgrade ImageMagick7-nox11Upgrade ImageMagick6Upgrade ImageMagick7Upgrade ImageMagick6-nox11 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 30, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Jul 2, 2019 | Mar 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jun 27, 2019 | Mar 7, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Mar 7, 2019 |
| Oracle_linux | — | Upgrade inkscapeUpgrade emacs-terminalUpgrade inkscape-viewUpgrade emacs-elUpgrade emacsUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade ImageMagickUpgrade emacs-noxUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade autotrace-develUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-perl | Oct 5, 2022 | Jan 17, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagickNo solution existsUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade inkscape-debuginfo | Apr 1, 2020 | Mar 7, 2019 |
| Suse | — | Upgrade imagemagick-config-6-upstreamUpgrade libmagick-devel-32bitUpgrade imagemagick-devel-32bitUpgrade libmagick-6_q16-3Upgrade imagemagick-develUpgrade imagemagick-extraUpgrade imagemagick-config-7-suseUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagick++1Upgrade imagemagickUpgrade graphicsmagickUpgrade libmagickwand-7_q16hdri6Upgrade libmagickcore-6_q16-1-32bitUpgrade libMagickCore1Upgrade libmagickcore-6_q16-1Upgrade libmagick-develUpgrade imagemagick-docUpgrade imagemagick-config-6-suseUpgrade libMagickCore1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickwand-6_q16-1Upgrade libMagickWand1-32bitUpgrade perl-perlmagickUpgrade imagemagick-config-7-upstreamUpgrade libMagickWand1Upgrade libGraphicsMagick2Upgrade libmagickcore-7_q16hdri6Upgrade libmagick-7_q16hdri4Upgrade perl-graphicsmagick | Apr 1, 2019 | Mar 7, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-7Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-8 | Jun 25, 2019 | Mar 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub