CVE-2019-11037: Out of bounds memory write in PHP Imagick extension
In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11037?
CVE-2019-11037 has a medium severity rating, indicating potential risk due to out of bounds memory writes.
How do I fix CVE-2019-11037?
To remediate CVE-2019-11037, update the PHP imagick extension to version 3.4.4 or later.
Which versions are affected by CVE-2019-11037?
CVE-2019-11037 affects PHP imagick versions from 3.3.0 to 3.4.4 inclusive.
Is CVE-2019-11037 a common vulnerability?
CVE-2019-11037 is not among the most common vulnerabilities but poses risks if used in vulnerable applications.
What are the consequences of CVE-2019-11037?
Exploitation of CVE-2019-11037 can lead to potential memory corruption and stability issues in applications using the affected imagick versions.