CVE-2019-12974

MEDIUM 5.5CVE-2019-12974 · Published 26/06/2019 · updated 17/06/2026

In short

CVE-2019-12974 is a MEDIUM (CVSS 5.5) vulnerability affecting imagemagick (imagemagick).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
imagemagick imagemagick	`= 7.0.8-34`	No fix yet

Description

A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image.

References

lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
securityfocus.com/bid/108913
ImageMagick/ImageMagick · Patch
lists.debian.org/debian-lts-announce/2019/08/msg00021.html
lists.debian.org/debian-lts-announce/2020/08/msg00030.html
usn.ubuntu.com/4192-1
debian.org/security/2020/dsa-4712

More vulnerabilities in imagemagick

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

imagemagick

= 7.0.8-34

No fix yet

More vulnerabilities in imagemagick

See all →