The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cases caused a value outside the range of type `int` to be returned. The flaw could be triggered by a crafted input file under certain conditions when processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Mar 25, 2021 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Apr 26, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Dec 3, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2020 |
| Suse | — | Upgrade libMagickCore1Upgrade ImageMagick-develUpgrade ImageMagick-config-7-SUSEUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libmagick-devel-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-develUpgrade perl-PerlMagickUpgrade ImageMagick-extraUpgrade libMagick++-6_Q16-3Upgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore1-32bitUpgrade imagemagick-devel-32bitUpgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick | Jan 16, 2021 | Dec 3, 2020 |
| Ubuntu | — | Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extra (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagickUpgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libimage-magick-perl (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro) | Jun 16, 2021 | Dec 3, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub