Fluid Attacks Database

Description

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	imagemagick	=8:6.9.11.60+dfsg-1.3 \|\| =8:6.9.11.60+dfsg-1.3+deb11u1 \|\| =8:6.9.11.60+dfsg-1.3+deb11u2 \|\| >=0 <8:6.9.11.60+dfsg-1.3+deb11u3	8:6.9.11.60+dfsg-1.3+deb11u3
debian 12	imagemagick	=8:6.9.11.60+dfsg-1.6 \|\| >=0 <8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u1
debian 13	imagemagick	>=0 <8:6.9.12.98+dfsg1-2	8:6.9.12.98+dfsg1-2
debian 14	imagemagick	>=0 <8:6.9.12.98+dfsg1-2	8:6.9.12.98+dfsg1-2
rpm rhel6	ImageMagick	-	-
rpm rhel7	ImageMagick	-	-

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.