Name: CVE-2023-39978: Missing Release of Memory after Effective Lifetime
Published: 2023-08-08T00:00:00.000Z
Keywords: CVE, CVE-2023-39978, CWE-401, CVSS 3.3, EPSS 0.00312

ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.

CVSS Details

CVSS 3.1 Base Score: 3.3
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon_linux_2023	View advisory ↗	amazon-linux-2023-upgrade-imagemagickamazon-linux-2023-upgrade-imagemagick-camazon-linux-2023-upgrade-imagemagick-c-debuginfoamazon-linux-2023-upgrade-imagemagick-c-develamazon-linux-2023-upgrade-imagemagick-debuginfoamazon-linux-2023-upgrade-imagemagick-debugsourceamazon-linux-2023-upgrade-imagemagick-develamazon-linux-2023-upgrade-imagemagick-docamazon-linux-2023-upgrade-imagemagick-libsamazon-linux-2023-upgrade-imagemagick-libs-debuginfoamazon-linux-2023-upgrade-imagemagick-perlamazon-linux-2023-upgrade-imagemagick-perl-debuginfo	Feb 17, 2025	Aug 8, 2023
Redhat_linux	—	no-fix-redhat-rpm-package	Jul 9, 2025	Aug 8, 2023
Ubuntu	View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗	no-fix-ubuntu-package	Jun 26, 2025	Aug 8, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub