Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-19949
9.1
CRITICALCVSS v3
Published
December 24, 2019
CVSS v2
6.4 MEDIUM
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
ImageMagick/ImageMagick
GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.
GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.>= 6.9.9-33, < 6.9.10-43, >= 7.0.7-23, < 7.0.8-43NVD
imagemagick
NPMA wrapper around the imagemagick cli
NPMA wrapper around the imagemagick cli>= 6.9.9-33, < 6.9.10-43, >= 7.0.7-23, < 7.0.8-43NVD
Docker Hub