Out-of-bounds read In imagemagick
Description
ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | =8:6.9.11.60+dfsg-1.3 || =8:6.9.11.60+dfsg-1.3+deb11u1 || =8:6.9.11.60+dfsg-1.3+deb11u10 || =8:6.9.11.60+dfsg-1.3+deb11u11 || =8:6.9.11.60+dfsg-1.3+deb11u12 || =8:6.9.11.60+dfsg-1.3+deb11u13 || =8:6.9.11.60+dfsg-1.3+deb11u14 || =8:6.9.11.60+dfsg-1.3+deb11u2 || =8:6.9.11.60+dfsg-1.3+deb11u3 || =8:6.9.11.60+dfsg-1.3+deb11u4 || =8:6.9.11.60+dfsg-1.3+deb11u5 || =8:6.9.11.60+dfsg-1.3+deb11u6 || =8:6.9.11.60+dfsg-1.3+deb11u7 || =8:6.9.11.60+dfsg-1.3+deb11u8 || =8:6.9.11.60+dfsg-1.3+deb11u9 || >=0 <8:6.9.11.60+dfsg-1.3+deb11u15 | 8:6.9.11.60+dfsg-1.3+deb11u15 | |
debian 12 | =8:6.9.11.60+dfsg-1.6 || =8:6.9.11.60+dfsg-1.6+deb12u1 || =8:6.9.11.60+dfsg-1.6+deb12u10 || =8:6.9.11.60+dfsg-1.6+deb12u11 || =8:6.9.11.60+dfsg-1.6+deb12u2 || =8:6.9.11.60+dfsg-1.6+deb12u3 || =8:6.9.11.60+dfsg-1.6+deb12u4 || =8:6.9.11.60+dfsg-1.6+deb12u5 || =8:6.9.11.60+dfsg-1.6+deb12u6 || =8:6.9.11.60+dfsg-1.6+deb12u7 || =8:6.9.11.60+dfsg-1.6+deb12u8 || =8:6.9.11.60+dfsg-1.6+deb12u9 || >=0 <8:6.9.11.60+dfsg-1.6+deb12u12 | 8:6.9.11.60+dfsg-1.6+deb12u12 | |
debian 13 | =8:7.1.1.43+dfsg1-1 || =8:7.1.1.43+dfsg1-1+deb13u1 || =8:7.1.1.43+dfsg1-1+deb13u10 || =8:7.1.1.43+dfsg1-1+deb13u2 || =8:7.1.1.43+dfsg1-1+deb13u3 || =8:7.1.1.43+dfsg1-1+deb13u4 || =8:7.1.1.43+dfsg1-1+deb13u5 || =8:7.1.1.43+dfsg1-1+deb13u6 || =8:7.1.1.43+dfsg1-1+deb13u7 || =8:7.1.1.43+dfsg1-1+deb13u8 || =8:7.1.1.43+dfsg1-1+deb13u9 || >=0 <8:7.1.1.43+dfsg1-1+deb13u11 | 8:7.1.1.43+dfsg1-1+deb13u11 | |
debian 14 | =8:7.1.1.43+dfsg1-1 || =8:7.1.1.46+dfsg1-1 || =8:7.1.1.47+dfsg1-1 || =8:7.1.1.47+dfsg1-2 || =8:7.1.2.1+dfsg1-1 || =8:7.1.2.12+dfsg1-1 || =8:7.1.2.13+dfsg1-1 || =8:7.1.2.3+dfsg1-1 || =8:7.1.2.7+dfsg1-1 || =8:7.1.2.8+dfsg1-1 || >=0 <8:7.1.2.15+dfsg1-1 | 8:7.1.2.15+dfsg1-1 | |
 rpm rhel6 | - | - | |
rpm rhel7 | - | - | |
 nuget | =10.0.0 || =10.1.0 || =11.0.0 || =11.1.0 || =11.1.1 || =11.1.2 || =11.2.0 || =11.2.1 || =11.3.0 || =12.0.0 || =12.0.1 || =12.1.0 || =12.2.0 || =12.2.1 || =12.2.2 || =12.3.0 || =13.0.0 || =13.0.1 || =13.1.0 || =13.1.1 || =13.1.2 || =13.1.3 || =13.10.0 || =13.2.0 || =13.3.0 || =13.4.0 || =13.5.0 || =13.6.0 || =13.7.0 || =13.8.0 || =13.9.0 || =13.9.1 || =14.0.0 || =14.1.0 || =14.10.0 || =14.10.1 || =14.10.2 || =14.2.0 || =14.3.0 || =14.4.0 || =14.5.0 || =14.6.0 || =14.7.0 || =14.8.0 || =14.8.1 || =14.8.2 || =14.9.0 || =14.9.1 || =6.8.8.1001 || =6.8.9.1 || =6.8.9.101 || =6.8.9.2 || =6.8.9.401 || =6.8.9.501 || =6.8.9.601 || =7.0.0.1 || =7.0.0.10 || =7.0.0.101 || =7.0.0.102 || =7.0.0.103 || =7.0.0.104 || =7.0.0.11 || =7.0.0.12 || =7.0.0.13 || =7.0.0.14 || =7.0.0.15 || =7.0.0.16 || =7.0.0.17 || =7.0.0.18 || =7.0.0.19 || =7.0.0.2 || =7.0.0.20 || =7.0.0.21 || =7.0.0.22 || =7.0.0.3 || =7.0.0.4 || =7.0.0.5 || =7.0.0.6 || =7.0.0.7 || =7.0.0.8 || =7.0.0.9 || =7.0.1 || =7.0.1.100 || =7.0.1.101 || =7.0.1.500 || =7.0.2.100 || =7.0.2.400 || =7.0.2.600 || =7.0.2.900 || =7.0.2.901 || =7.0.2.902 || =7.0.3 || =7.0.3.1 || =7.0.3.300 || =7.0.3.500 || =7.0.3.501 || =7.0.3.502 || =7.0.3.901 || =7.0.3.902 || =7.0.4.100 || =7.0.4.400 || =7.0.4.700 || =7.0.4.701 || =7.0.5.500 || =7.0.5.501 || =7.0.5.502 || =7.0.5.800 || =7.0.5.900 || =7.0.6 || =7.0.6.100 || =7.0.6.1000 || =7.0.6.1001 || =7.0.6.1002 || =7.0.6.101 || =7.0.6.102 || =7.0.6.600 || =7.0.6.601 || =7.0.7 || =7.0.7.300 || =7.0.7.700 || =7.0.7.900 || =7.1.0 || =7.10.0 || =7.10.1 || =7.10.2 || =7.11.0 || =7.11.1 || =7.12.0 || =7.13.0 || =7.13.1 || =7.14.0 || =7.14.0.1 || =7.14.0.2 || =7.14.0.3 || =7.14.1 || =7.14.2 || =7.14.3 || =7.14.4 || =7.14.5 || =7.15.0 || =7.15.0.1 || =7.15.1 || =7.15.2 || =7.15.3 || =7.15.4 || =7.15.5 || =7.16.0 || =7.16.1 || =7.17.0 || =7.17.0.1 || =7.18.0 || =7.19.0 || =7.19.0.1 || =7.2.0 || =7.2.1 || =7.20.0 || =7.20.0.1 || =7.21.0 || =7.21.1 || =7.22.0 || =7.22.1 || =7.22.2 || =7.22.2.1 || =7.22.2.2 || =7.22.3 || =7.23.0 || =7.23.1 || =7.23.2 || =7.23.2.1 || =7.23.3 || =7.23.4 || =7.24.0 || =7.24.1 || =7.3.0 || =7.4.0 || =7.4.1 || =7.4.2 || =7.4.3 || =7.4.4 || =7.4.5 || =7.4.6 || =7.5.0 || =7.5.0.1 || =7.6.0 || =7.6.0.1 || =7.7.0 || =7.8.0 || =7.9.0 || =7.9.0.1 || =7.9.0.2 || =7.9.1 || =7.9.2 || =8.0.0 || =8.0.1 || =8.1.0 || =8.2.0 || =8.2.1 || =8.3.0 || =8.3.1 || =8.3.2 || =8.3.3 || =8.4.0 || =8.5.0 || =8.6.0 || =8.6.1 || =9.0.0 || =9.1.0 || =9.1.1 || =9.1.2 || >=0 <14.10.3 | 14.10.3 | |
nuget | =10.0.0 || =10.1.0 || =11.0.0 || =11.1.0 || =11.1.1 || =11.1.2 || =11.2.0 || =11.2.1 || =11.3.0 || =12.0.0 || =12.0.1 || =12.1.0 || =12.2.0 || =12.2.1 || =12.2.2 || =12.3.0 || =13.0.0 || =13.0.1 || =13.1.0 || =13.1.1 || =13.1.2 || =13.1.3 || =13.10.0 || =13.2.0 || =13.3.0 || =13.4.0 || =13.5.0 || =13.6.0 || =13.7.0 || =13.8.0 || =13.9.0 || =13.9.1 || =14.0.0 || =14.1.0 || =14.10.0 || =14.10.1 || =14.10.2 || =14.2.0 || =14.3.0 || =14.4.0 || =14.5.0 || =14.6.0 || =14.7.0 || =14.8.0 || =14.8.1 || =14.8.2 || =14.9.0 || =14.9.1 || =6.8.9.101 || =6.8.9.401 || =6.8.9.501 || =6.8.9.601 || =7.0.0.1 || =7.0.0.10 || =7.0.0.101 || =7.0.0.102 || =7.0.0.103 || =7.0.0.104 || =7.0.0.11 || =7.0.0.12 || =7.0.0.13 || =7.0.0.14 || =7.0.0.15 || =7.0.0.16 || =7.0.0.17 || =7.0.0.18 || =7.0.0.19 || =7.0.0.2 || =7.0.0.20 || =7.0.0.21 || =7.0.0.22 || =7.0.0.3 || =7.0.0.4 || =7.0.0.5 || =7.0.0.6 || =7.0.0.7 || =7.0.0.8 || =7.0.0.9 || =7.0.1 || =7.0.1.100 || =7.0.1.101 || =7.0.1.500 || =7.0.2.100 || =7.0.2.400 || =7.0.2.600 || =7.0.2.900 || =7.0.2.901 || =7.0.2.902 || =7.0.3 || =7.0.3.1 || =7.0.3.300 || =7.0.3.500 || =7.0.3.501 || =7.0.3.502 || =7.0.3.901 || =7.0.3.902 || =7.0.4.100 || =7.0.4.400 || =7.0.4.700 || =7.0.4.701 || =7.0.5.500 || =7.0.5.501 || =7.0.5.502 || =7.0.5.800 || =7.0.5.900 || =7.0.6 || =7.0.6.100 || =7.0.6.1000 || =7.0.6.1001 || =7.0.6.1002 || =7.0.6.101 || =7.0.6.102 || =7.0.6.600 || =7.0.6.601 || =7.0.7 || =7.0.7.300 || =7.0.7.700 || =7.0.7.900 || =7.1.0 || =7.10.0 || =7.10.1 || =7.10.2 || =7.11.0 || =7.11.1 || =7.12.0 || =7.13.0 || =7.13.1 || =7.14.0 || =7.14.0.1 || =7.14.0.2 || =7.14.0.3 || =7.14.1 || =7.14.2 || =7.14.3 || =7.14.4 || =7.14.5 || =7.15.0 || =7.15.0.1 || =7.15.1 || =7.15.2 || =7.15.3 || =7.15.4 || =7.15.5 || =7.16.0 || =7.16.1 || =7.17.0 || =7.17.0.1 || =7.18.0 || =7.19.0 || =7.19.0.1 || =7.2.0 || =7.2.1 || =7.20.0 || =7.20.0.1 || =7.21.0 || =7.21.1 || =7.22.0 || =7.22.1 || =7.22.2 || =7.22.2.1 || =7.22.2.2 || =7.22.3 || =7.23.0 || =7.23.1 || =7.23.2 || =7.23.2.1 || =7.23.3 || =7.23.4 || =7.24.0 || =7.24.1 || =7.3.0 || =7.4.0 || =7.4.1 || =7.4.2 || =7.4.3 || =7.4.4 || =7.4.5 || =7.4.6 || =7.5.0 || =7.5.0.1 || =7.6.0 || =7.6.0.1 || =7.7.0 || =7.8.0 || =7.9.0 || =7.9.0.1 || =7.9.0.2 || =7.9.1 || =7.9.2 || =8.0.0 || =8.0.1 || =8.1.0 || =8.2.0 || =8.2.1 || =8.3.0 || =8.3.1 || =8.3.2 || =8.3.3 || =8.4.0 || =8.5.0 || =8.6.0 || =8.6.1 || =9.0.0 || =9.1.0 || =9.1.1 || =9.1.2 || >=0 <14.10.3 | 14.10.3 | |
nuget | =10.0.0 || =10.1.0 || =11.0.0 || =11.1.0 || =11.1.1 || =11.1.2 || =11.2.0 || =11.2.1 || =11.3.0 || =12.0.0 || =12.0.1 || =12.1.0 || =12.2.0 || =12.2.1 || =12.2.2 || =12.3.0 || =13.0.0 || =13.0.1 || =13.1.0 || =13.1.1 || =13.1.2 || =13.1.3 || =13.10.0 || =13.2.0 || =13.3.0 || =13.4.0 || =13.5.0 || =13.6.0 || =13.7.0 || =13.8.0 || =13.9.0 || =13.9.1 || =14.0.0 || =14.1.0 || =14.10.0 || =14.10.1 || =14.10.2 || =14.2.0 || =14.3.0 || =14.4.0 || =14.5.0 || =14.6.0 || =14.7.0 || =14.8.0 || =14.8.1 || =14.8.2 || =14.9.0 || =14.9.1 || =8.6.0 || =8.6.1 || =9.0.0 || =9.1.0 || =9.1.1 || =9.1.2 || >=0 <14.10.3 | 14.10.3 | |
nuget | =10.0.0 || =10.1.0 || =11.0.0 || =11.1.0 || =11.1.1 || =11.1.2 || =11.2.0 || =11.2.1 || =11.3.0 || =12.0.0 || =12.0.1 || =12.1.0 || =12.2.0 || =12.2.1 || =12.2.2 || =12.3.0 || =13.0.0 || =13.0.1 || =13.1.0 || =13.1.1 || =13.1.2 || =13.1.3 || =13.10.0 || =13.2.0 || =13.3.0 || =13.4.0 || =13.5.0 || =13.6.0 || =13.7.0 || =13.8.0 || =13.9.0 || =13.9.1 || =14.0.0 || =14.1.0 || =14.10.0 || =14.10.1 || =14.10.2 || =14.2.0 || =14.3.0 || =14.4.0 || =14.5.0 || =14.6.0 || =14.7.0 || =14.8.0 || =14.8.1 || =14.8.2 || =14.9.0 || =14.9.1 || =7.14.0 || =7.14.0.1 || =7.14.0.2 || =7.14.0.3 || =7.14.1 || =7.14.2 || =7.14.3 || =7.14.4 || =7.14.5 || =7.15.0 || =7.15.0.1 || =7.15.1 || =7.15.2 || =7.15.3 || =7.15.4 || =7.15.5 || =7.16.0 || =7.16.1 || =7.17.0 || =7.17.0.1 || =7.18.0 || =7.19.0 || =7.19.0.1 || =7.20.0 || =7.20.0.1 || =7.21.0 || =7.21.1 || =7.22.0 || =7.22.1 || =7.22.2 || =7.22.2.1 || =7.22.2.2 || =7.22.3 || =7.23.0 || =7.23.1 || =7.23.2 || =7.23.2.1 || =7.23.3 || =7.23.4 || =7.24.0 || =7.24.1 || =8.0.0 || =8.0.1 || =8.1.0 || =8.2.0 || =8.2.1 || =8.3.0 || =8.3.1 || =8.3.2 || =8.3.3 || =8.4.0 || =8.5.0 || =8.6.0 || =8.6.1 || =9.0.0 || =9.1.0 || =9.1.1 || =9.1.2 || >=0 <14.10.3 | 14.10.3 |
1-10 of 25
10
Aliases
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.