{"id":"CVE-2018-12599","aliases":["DEBIAN-CVE-2018-12599","DLA-1394-1","DSA-4245-1","EUVD-2018-4558","GHSA-3gpg-jmj2-prg2","RHSA-2020:1180","SUSE-SU-2018:2043-1","SUSE-SU-2018:2465-1","SUSE-SU-2018:3191-1","UBUNTU-CVE-2018-12599","USN-3711-1"],"status":"published","title":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to...","description":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03244,"percentile":0.88391,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2018-06-20T00:00:00Z","modified":"2026-10-24T10:47:37Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.10.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.10.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.10.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-5+deb8u13"}]}],"versions":["8:6.8.9.9-5","8:6.8.9.9-5+deb8u1","8:6.8.9.9-5+deb8u10","8:6.8.9.9-5+deb8u11","8:6.8.9.9-5+deb8u12","8:6.8.9.9-5+deb8u2","8:6.8.9.9-5+deb8u3","8:6.8.9.9-5+deb8u4","8:6.8.9.9-5+deb8u5","8:6.8.9.9-5+deb8u6","8:6.8.9.9-5+deb8u7","8:6.8.9.9-5+deb8u8","8:6.8.9.9-5+deb8u9"],"bundled":3},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u5"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4"],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.56.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.56.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.56.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.12"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.12"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.3"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.12"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.12"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.3"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2"],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/06/msg00004.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3711-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/1177","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://www.debian.org/security/2018/dsa-4245","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12599","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3gpg-jmj2-prg2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-12599","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1180","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1532845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801681","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1180.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18251","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18254","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18271","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18273","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18273","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000476","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10177","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11656","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12599","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14434","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14435","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14436","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626570","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16643","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17966","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18016","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637189","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18024","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20467","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7397","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7398","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7398","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11472","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11597","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11598","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12974","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12975","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12978","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12979","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13297","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13300","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13300","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13304","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13306","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13310","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13310","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13311","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13311","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13311","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14980","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14981","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15139","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16708","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16713","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19948","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19949","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182043-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1094742","tags":["report"]},{"url":"https://bugzilla.suse.com/1094745","tags":["report"]},{"url":"https://bugzilla.suse.com/1095812","tags":["report"]},{"url":"https://bugzilla.suse.com/1096200","tags":["report"]},{"url":"https://bugzilla.suse.com/1096203","tags":["report"]},{"url":"https://bugzilla.suse.com/1098545","tags":["report"]},{"url":"https://bugzilla.suse.com/1098546","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12600","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182465-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1056277","tags":["report"]},{"url":"https://bugzilla.suse.com/1094204","tags":["report"]},{"url":"https://bugzilla.suse.com/1094237","tags":["report"]},{"url":"https://bugzilla.suse.com/1102003","tags":["report"]},{"url":"https://bugzilla.suse.com/1102004","tags":["report"]},{"url":"https://bugzilla.suse.com/1102005","tags":["report"]},{"url":"https://bugzilla.suse.com/1102007","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14437","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1110746","tags":["report"]},{"url":"https://bugzilla.suse.com/1110747","tags":["report"]},{"url":"https://bugzilla.suse.com/1111069","tags":["report"]},{"url":"https://bugzilla.suse.com/1111072","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18024","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-12599","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3711-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-12600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-13153","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-12599","description":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.","status":"published","published":"2018-06-20T18:00:00Z","modified":"2024-08-05T08:38:06.331Z","updated_at":"2026-11-02T14:35:06.679212Z"}],"euvd":[{"id":"EUVD-2018-4558","description":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.","status":"published","published":"2018-06-20T18:00:00Z","modified":"2024-08-05T08:38:06Z","updated_at":"2026-11-03T02:39:52.61924Z"}],"ghsa":[{"id":"GHSA-3gpg-jmj2-prg2","title":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to...","description":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.","status":"published","published":"2022-05-14T03:09:06Z","modified":"2023-02-02T05:07:39Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:52:33.427724Z"}],"nvd":[{"id":"CVE-2018-12599","description":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.","status":"published","published":"2018-06-20T18:29:00.28Z","modified":"2026-06-17T01:38:02.277Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:29.837913Z"}],"osv":[{"id":"CVE-2018-12599","description":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.","status":"published","published":"2018-06-20T18:29:00.28Z","modified":"2026-10-24T10:47:37.285028438Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.934182Z"},{"id":"DEBIAN-CVE-2018-12599","description":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.","status":"published","published":"2018-06-20T18:29:00.28Z","modified":"2026-10-23T18:03:18.873178861Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2020:1180","title":"Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:13:45Z","modified":"2026-06-27T10:09:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2018-12599","description":"In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.","status":"published","published":"2018-06-20T00:00:00Z","modified":"2026-04-22T11:44:00.860323Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"DLA-1394-1","title":"imagemagick - security update","status":"published","published":"2018-06-21T00:00:00Z","modified":"2026-03-09T01:01:51.742782Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4245-1","title":"imagemagick - security update","status":"published","published":"2018-07-14T00:00:00Z","modified":"2026-03-09T02:11:34.013829Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"SUSE-SU-2018:2043-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nThe following security vulnerabilities were fixed:\n\n- CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the\n  quantize.c file, which allowed remote attackers to cause buffer over-read via\n  a crafted file. (bsc#1096200)\n- CVE-2018-11624: Fixed a use-after-free issue in the ReadMATImage function in\n  coders/mat.c. (bsc#1096203)\n- CVE-2018-10805: Fixed several memory leaks in bgr.c, rgb.c, cmyk.c, gray.c,\n  and ycbcr.c (bsc#1095812)\n- CVE-2018-12600: The ReadDIBImage and WriteDIBImage functions allowed\n  attackers to cause an out of bounds write via a crafted file (bsc#1098545).\n- CVE-2018-12599: The ReadBMPImage and WriteBMPImage fucntions allowed\n  attackers to cause an out of bounds write via a crafted file (bsc#1098546).\n\nThe following other changes were made:\n\n- Fix -gamma issues in special cases. (bsc#1094745, bsc#1094742)\n","status":"published","published":"2018-07-23T14:02:48Z","modified":"2026-02-04T03:56:32.399212Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2465-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-11251: Heap-based buffer over-read in ReadSUNImage in coders/sun.c,\n  which allows attackers to cause denial of service (bsc#1094237)\n- CVE-2017-18271: Infinite loop in the function ReadMIFFImage in coders/miff.c,\n  which allows attackers to cause a denial of service (bsc#1094204)\n- CVE-2017-13758: Heap-based buffer overflow in the TracePoint() in\n  MagickCore/draw.c, which allows attackers to cause a denial of\n  service(bsc#1056277)\n- CVE-2018-10805: Fixed several memory leaks in rgb.c, cmyk.c, gray.c, and\n  ycbcr.c (bsc#1095812)\n- CVE-2018-12600: The ReadDIBImage and WriteDIBImage functions allowed\n  attackers to cause an out of bounds write via a crafted file (bsc#1098545)\n- CVE-2018-12599: The ReadBMPImage and WriteBMPImage fucntions allowed\n  attackers to cause an out of bounds write via a crafted file (bsc#1098546)\n- CVE-2018-14434: Fixed a memory leak for a colormap in WriteMPCImage in coders/mpc.c (bsc#1102003)\n- CVE-2018-14435: Fixed a memory leak in DecodeImage in coders/pcd.c (bsc#1102007) \n- CVE-2018-14436: Fixed a memory leak in ReadMIFFImage in coders/miff.c (bsc#1102005)\n- CVE-2018-14437: Fixed a memory leak in parse8BIM in coders/meta.c (bsc#1102004)\n","status":"published","published":"2018-08-21T06:42:49Z","modified":"2026-02-04T03:17:48.708155Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3191-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of\n  the coders/bmp.c file. Remote attackers could leverage this vulnerability\n  to cause a denial of service via a crafted bmp file. (bsc#1111069)\n- CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072).\n- CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747).\n- CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746).\n- CVE-2018-12600: ReadDIBImage and WriteDIBImage allowed attackers to\n  cause an out of bounds write via a crafted file. (bsc#1098545)\n- CVE-2018-12599: ReadBMPImage and WriteBMPImage allowed attackers to\n  cause an out of bounds write via a crafted file. (bsc#1098546)\n","status":"published","published":"2018-10-17T05:06:32Z","modified":"2026-02-04T02:49:56.160237Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-3711-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2018-07-11T12:27:00Z","modified":"2026-04-22T09:47:54.970045Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}