ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html | Mailing List Third Party Advisory |
https://github.com/ImageMagick/ImageMagick/commit/fe3066122ef72c82415811d25e9e3fad622c0a99 | Patch Third Party Advisory |
https://github.com/ImageMagick/ImageMagick/issues/1600 | Issue Tracking Patch Third Party Advisory |
Configurations
History
02 Jun 2021, 19:51
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
|
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - Mailing List, Third Party Advisory | |
References | (MISC) https://github.com/ImageMagick/ImageMagick/issues/1600 - Issue Tracking, Patch, Third Party Advisory |
Information
Published : 2019-07-01 20:15
Updated : 2024-02-04 20:20
NVD link : CVE-2019-13134
Mitre link : CVE-2019-13134
CVE.ORG link : CVE-2019-13134
JSON object : View
Products Affected
imagemagick
- imagemagick
opensuse
- leap
CWE
CWE-401
Missing Release of Memory after Effective Lifetime