Name: CVE-2021-3574: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2022-08-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-3574, CWE-401, CVSS 3.3, EPSS 0.00033

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.

CVSS Details

CVSS 3.1 Base Score: 3.3
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade imagemagick	Aug 22, 2024	Aug 26, 2022
Amazon Linux Ami 2	—	Upgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-perl	Mar 7, 2023	Aug 26, 2022
Amazon_linux	—	Upgrade ImageMagick	Mar 7, 2023	Aug 26, 2022
Debian	—	Upgrade imagemagick	Mar 13, 2023	Aug 26, 2022
Suse	—	Upgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-develUpgrade imagemagick-devel-32bitUpgrade imagemagick-config-7-upstreamUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagickUpgrade libMagickWand-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade libmagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-extraUpgrade ImageMagick-docUpgrade libMagick++-devel	Oct 26, 2022	Aug 26, 2022
Ubuntu	—	Upgrade imagemagick-commonUpgrade libmagickwand-6.q16-devUpgrade imagemagick-6-commonUpgrade libmagick++-6.q16-devUpgrade imagemagick-6.q16hdriUpgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagickwand-6.q16-6Upgrade libmagickcore-6.q16-6-extraUpgrade libimage-magick-perlUpgrade libimage-magick-q16-perlUpgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6-arch-configUpgrade libmagickcore-6-headersUpgrade libmagickcore-devUpgrade libmagick++-6.q16hdri-8Upgrade perlmagickUpgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-6.q16-devUpgrade libmagickwand-devUpgrade libmagick++-dev	Nov 24, 2022	Aug 26, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence