CVE-2019-7396: High severity imagemagick vulnerability
In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-7396?
CVE-2019-7396 is a vulnerability in ImageMagick that causes a memory leak in the ReadSIXELImage function.
What is the severity of CVE-2019-7396?
CVE-2019-7396 has a severity rating of 7.5 (high).
Which versions of ImageMagick are affected by CVE-2019-7396?
ImageMagick versions 6.9.10-25 to 7.0.8-25 are affected by CVE-2019-7396.
How can I fix CVE-2019-7396?
To fix CVE-2019-7396, update ImageMagick to version 8:6.9.10.23+dfsg-2.1+deb10u1 or later.
Where can I find more information about CVE-2019-7396?
You can find more information about CVE-2019-7396 in the links provided: - [OpenSUSE Security Announcement](http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html) - [SecurityFocus](http://www.securityfocus.com/bid/106849) - [GitHub commit](https://github.com/ImageMagick/ImageMagick/commit/748a03651e5b138bcaf160d15133de2f4b1b89ce)