A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | May 11, 2021 |
| Debian | — | Upgrade imagemagick | Jun 4, 2021 | May 11, 2021 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick7-nox11 | Nov 4, 2022 | May 13, 2021 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 16, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 7, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | — | Aug 10, 2021 | May 11, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 11, 2021 |
| Suse | — | Upgrade libMagickWand-7_Q16HDRI10Upgrade libMagick++-7_Q16HDRI5Upgrade libMagick++-7_Q16HDRI4Upgrade imagemagick-config-7-upstreamUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-develUpgrade ImageMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-develUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-6_Q16-1-32bitUpgrade perl-PerlMagickUpgrade libmagick-devel-32bitUpgrade libMagickCore-7_Q16HDRI10Upgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1Upgrade imagemagick-devel-32bitUpgrade ImageMagick-extraUpgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagick-7_q16hdri4-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-7-SUSE | Apr 21, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade libmagickwand-6.q16-6Upgrade imagemagick-6.q16hdriUpgrade libmagickcore-6.q16-6Upgrade libimage-magick-perlUpgrade imagemagick-6.q16Upgrade imagemagick-6-commonUpgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagick++-devUpgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-devUpgrade libmagick++-6.q16-7Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-devUpgrade libmagickwand-devUpgrade perlmagickUpgrade imagemagickUpgrade libmagickwand-6.q16-devUpgrade libmagick++-6.q16hdri-8Upgrade libimage-magick-q16-perlUpgrade imagemagick-commonUpgrade libmagickcore-6-arch-configUpgrade libmagick++-6.q16hdri-devUpgrade libmagickcore-6-headersUpgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16-dev | Nov 30, 2021 | Apr 20, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub