- Description
- ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability occurs when processing an image with small dimension using the `-wavelet-denoise` operator. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
- Source
- security-advisories@github.com
- NVD status
- Analyzed
- Products
- imagemagick, magick.net
CVSS 3.1
- Type
- Primary
- Base score
- 7.1
- Impact score
- 5.2
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- Severity
- HIGH
- security-advisories@github.com
- CWE-125
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C6F44A65-1733-4752-AAD0-BCCC7BDBC877",
"versionEndExcluding": "6.9.13-40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6AFFD439-1068-4B6F-AE01-724AC62CDCEA",
"versionEndExcluding": "7.1.2-15",
"versionStartIncluding": "7.0.0-0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F5891403-B079-4CD7-BA2A-361146A2F475",
"versionEndExcluding": "14.10.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]