CVE-2018-14551: Critical severity ImageMagick ImageMagick vulnerability
Last updated 25 August 2025
Other sources
The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u4Fixed in 8:6.9.11.60+dfsg-1.3+deb11u9Fixed in 8:6.9.11.60+dfsg-1.6+deb12u5Fixed in 8:6.9.11.60+dfsg-1.6+deb12u6Fixed in 8:7.1.1.43+dfsg1-1+deb13u4Fixed in 8:7.1.1.43+dfsg1-1+deb13u5Fixed in 8:7.1.2.13+dfsg1-1 - Upgrade
Upgrade
alpine/imagemagick6to a version that resolves this vulnerability.Fixed in 6.9.10.37-r0 - Upgrade
Upgrade
alpine/imagemagick6to a version that resolves this vulnerability.Fixed in 6.9.10.39-r0
Event History
Frequently Asked Questions
What is CVE-2018-14551?
CVE-2018-14551 is a vulnerability in ImageMagick that allows for memory corruption due to an uninitialized variable.
What is the severity of CVE-2018-14551?
CVE-2018-14551 has a severity rating of 9.8 (Critical).
How does CVE-2018-14551 affect ImageMagick?
CVE-2018-14551 affects ImageMagick version 7.0.8-7.
How can I fix CVE-2018-14551?
To fix CVE-2018-14551, update ImageMagick to version 6.9.10-8 or later.
Where can I find more information about CVE-2018-14551?
You can find more information about CVE-2018-14551 at the following references: [Link 1](https://github.com/ImageMagick/ImageMagick/issues/1221), [Link 2](https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html), [Link 3](https://usn.ubuntu.com/3785-1/).