| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | ≥ 7.0.0-0, < 7.1.2-32< 6.9.13-57 | 7.1.2-326.9.13-57 |
ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image metadata, disclosing sensitive heap information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free