CVE-2019-19952

Опубликовано: 24 дек. 2019

Источник: debian

Описание

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.

Пакет	Статус	Версия исправления	Релиз	Тип
imagemagick	not-affected			package

https://github.com/ImageMagick/ImageMagick/issues/1791
https://github.com/ImageMagick/ImageMagick/commit/916d7bbd2c66a286d379dbd94bc6035c8fab937c (7.x)
https://github.com/ImageMagick/ImageMagick6/commit/7ef923841437bb57bd9b55fc0bf40ddc99b93c2b (6.x)

CVE-2019-19952

CVSS3: 9.8

ubuntu

около 6 лет назад

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.

CVE-2019-19952

CVSS3: 7

redhat

около 6 лет назад

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.

CVE-2019-19952

CVSS3: 9.8

nvd

около 6 лет назад

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.

GHSA-x77f-4pxj-9mvh

github

больше 3 лет назад

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.