Out-of-bounds read In autotrace
Description
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | - | - | |
rpm rhel6 | - | - | |
rpm rhel7 | 0:6.9.10.68-3.el7 | ||
rpm rhel7 | 0:0.31.1-38.el7 | ||
rpm rhel7 | 1:24.3-23.el7 | ||
rpm rhel7 | 0:0.92.2-3.el7 |
Aliases
1. 2. 3.