| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | ≥ 7.0.0-0, ≤ 7.0.3-7< 6.9.6-6 | 6.9.6-6 |
The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free