CVE-2019-13302: High severity ImageMagick ImageMagick vulnerability
Published Jul 5, 2019
·Updated
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages.
Affected Software
30 affected componentsFixes available
ImageMagick ImageMagick=7.0.8-50-q16
openSUSE Leap=15.0
openSUSE Leap=15.1
alpine/imagemagick<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<7.0.8.53-r0
7.0.8.53-r0
alpine/imagemagick<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
alpine/imagemagick6<6.9.10.53-r0
6.9.10.53-r0
Remediation
Patch Available
Event History
Jul 5, 2019
CVE Published
via MITRE·12:52 AM
Data Sourced
via MITRE·12:52 AM
Description
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·01:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-13302?
CVE-2019-13302 is rated as a medium severity vulnerability due to its potential to cause a heap-based buffer over-read.
2
How do I fix CVE-2019-13302?
To fix CVE-2019-13302, users should upgrade to a patched version of ImageMagick or apply necessary security patches provided by their operating system.
3
Which versions of ImageMagick are affected by CVE-2019-13302?
CVE-2019-13302 affects ImageMagick version 7.0.8-50 Q16.
4
What is the impact of CVE-2019-13302 on system security?
CVE-2019-13302 can allow attackers to perform a buffer over-read, which may lead to information disclosure.
5
Are there specific operating systems vulnerable to CVE-2019-13302?
Yes, openSUSE Leap 15.0 and 15.1 are among the operating systems that are vulnerable to CVE-2019-13302.