CVE-2019-13299: High severity ImageMagick ImageMagick vulnerability
Published Jul 5, 2019
·Updated
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel.
Affected Software
30 affected componentsFixes available
ImageMagick ImageMagick=7.0.8-50-q16
openSUSE Leap=15.0
openSUSE Leap=15.1
alpine/imagemagick<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
Remediation
Patch Available
Event History
Jul 5, 2019
CVE Published
via MITRE·12:52 AM
Data Sourced
via MITRE·12:52 AM
Description
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·01:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-13299?
CVE-2019-13299 is considered a moderate severity vulnerability due to its potential for heap-based buffer over-read that may lead to information disclosure.
2
How do I fix CVE-2019-13299?
To fix CVE-2019-13299, users should upgrade ImageMagick to the latest version that has addressed this vulnerability.
3
What effect does CVE-2019-13299 have on affected software?
CVE-2019-13299 can allow an attacker to read sensitive memory regions, potentially leading to unauthorized access to confidential data.
4
Which versions of ImageMagick are affected by CVE-2019-13299?
CVE-2019-13299 affects ImageMagick version 7.0.8-50 Q16 specifically.
5
Is there a workaround for CVE-2019-13299?
There is no specific workaround for CVE-2019-13299 other than upgrading to a patched version of ImageMagick.