Fluid Attacks Database

Description

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	imagemagick	=8:6.9.11.60+dfsg-1.3 \|\| =8:6.9.11.60+dfsg-1.3+deb11u1 \|\| =8:6.9.11.60+dfsg-1.3+deb11u2 \|\| =8:6.9.11.60+dfsg-1.3+deb11u3 \|\| =8:6.9.11.60+dfsg-1.3+deb11u4 \|\| >=0 <8:6.9.11.60+dfsg-1.3+deb11u5	8:6.9.11.60+dfsg-1.3+deb11u5
debian 12	imagemagick	=8:6.9.11.60+dfsg-1.6 \|\| =8:6.9.11.60+dfsg-1.6+deb12u1 \|\| =8:6.9.11.60+dfsg-1.6+deb12u2 \|\| >=0 <8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u3
debian 13	imagemagick	=8:7.1.1.43+dfsg1-1 \|\| >=0 <8:7.1.1.43+dfsg1-1+deb13u1	8:7.1.1.43+dfsg1-1+deb13u1
debian 14	imagemagick	=8:7.1.1.43+dfsg1-1 \|\| >=0 <8:7.1.1.46+dfsg1-1	8:7.1.1.46+dfsg1-1
rpm rhel6	ImageMagick	-	-
rpm rhel7	ImageMagick	-	-

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.