in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. The memory leak can be triggered by a crafted input file that is processed by ImageMagick and could cause an impact to application reliability, such as denial of service. This flaw affects ImageMagick versions prior to 7.0.9-0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Dec 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Dec 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Apr 26, 2022 | Dec 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Dec 8, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2020 |
| Suse | — | Upgrade libmagick-devel-32bitUpgrade libMagick++-develUpgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickCore1Upgrade libMagickCore-6_Q16-1Upgrade imagemagick-devel-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-develUpgrade libMagickCore1-32bit | Jan 16, 2021 | Dec 8, 2020 |
| Ubuntu | — | Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-8Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro) | Jun 16, 2021 | Dec 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub