USN-4549-1 — imagemagick vulnerabilities

Summary

It was discovered that ImageMagick incorrectly handled certain specially
crafted image files. If a user or automated system using ImageMagick were
tricked into opening a specially crafted image, an attacker could exploit
this to cause a denial of service or other unspecified impact.
(CVE-2019-19948, CVE-2019-19949)

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	imagemagick	8:6.9.10.23+dfsg-2.1ubuntu11.1

Vulnerabilities 2

Unscored —

CVE-2019-19948

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Dec 24, 2019
Unscored —

CVE-2019-19949

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, rela…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Dec 24, 2019

References

report
https://ubuntu.com/security/CVE-2019-19948
report
https://ubuntu.com/security/CVE-2019-19949

imagemagick vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 2

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, rela…

References