{"id":"CVE-2019-12977","aliases":["DEBIAN-CVE-2019-12977","DLA-2333-1","DSA-4712-1","EUVD-2019-4552","GHSA-c95q-hjp6-cfq4","SUSE-SU-2019:2106-1","UBUNTU-CVE-2019-12977","USN-4192-1","openSUSE-SU-2019:1983-1"],"status":"published","title":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image...","description":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image function in coders/jp2.c.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01883,"percentile":0.79638,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-665"],"published":"2019-06-26T17:09:05Z","modified":"2026-10-24T10:47:41Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u9"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8"],"bundled":24},{"source":"osv","ecosystem":"Debian:10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u1"}]}],"versions":["8:6.9.10.23+dfsg-2.1"],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.15"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.8"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu9"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.15"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.8"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7"],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.9.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.9.1"}]}],"bundled":30}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/issues/1518","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/108913","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4192-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://www.debian.org/security/2020/dsa-4712","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12977"},{"url":"https://github.com/advisories/GHSA-c95q-hjp6-cfq4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-12977","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192106-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1139884","tags":["report"]},{"url":"https://bugzilla.suse.com/1139885","tags":["report"]},{"url":"https://bugzilla.suse.com/1139886","tags":["report"]},{"url":"https://bugzilla.suse.com/1140100","tags":["report"]},{"url":"https://bugzilla.suse.com/1140102","tags":["report"]},{"url":"https://bugzilla.suse.com/1140103","tags":["report"]},{"url":"https://bugzilla.suse.com/1140104","tags":["report"]},{"url":"https://bugzilla.suse.com/1140105","tags":["report"]},{"url":"https://bugzilla.suse.com/1140106","tags":["report"]},{"url":"https://bugzilla.suse.com/1140110","tags":["report"]},{"url":"https://bugzilla.suse.com/1140111","tags":["report"]},{"url":"https://bugzilla.suse.com/1140501","tags":["report"]},{"url":"https://bugzilla.suse.com/1140513","tags":["report"]},{"url":"https://bugzilla.suse.com/1140520","tags":["report"]},{"url":"https://bugzilla.suse.com/1140534","tags":["report"]},{"url":"https://bugzilla.suse.com/1140538","tags":["report"]},{"url":"https://bugzilla.suse.com/1140543","tags":["report"]},{"url":"https://bugzilla.suse.com/1140545","tags":["report"]},{"url":"https://bugzilla.suse.com/1140547","tags":["report"]},{"url":"https://bugzilla.suse.com/1140549","tags":["report"]},{"url":"https://bugzilla.suse.com/1140552","tags":["report"]},{"url":"https://bugzilla.suse.com/1140554","tags":["report"]},{"url":"https://bugzilla.suse.com/1140664","tags":["report"]},{"url":"https://bugzilla.suse.com/1140665","tags":["report"]},{"url":"https://bugzilla.suse.com/1140666","tags":["report"]},{"url":"https://bugzilla.suse.com/1140667","tags":["report"]},{"url":"https://bugzilla.suse.com/1140668","tags":["report"]},{"url":"https://bugzilla.suse.com/1140669","tags":["report"]},{"url":"https://bugzilla.suse.com/1140673","tags":["report"]},{"url":"https://bugzilla.suse.com/1141171","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13454","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-12977","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4192-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16713","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YNM2LVHZUR2GCLOOK3NWALHSAJQKCA67/#YNM2LVHZUR2GCLOOK3NWALHSAJQKCA67","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-12977","description":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image function in coders/jp2.c.","status":"published","published":"2019-06-26T17:09:05Z","modified":"2024-08-04T23:41:10.371Z","updated_at":"2026-11-02T14:20:23.697579Z"}],"euvd":[{"id":"EUVD-2019-4552","description":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image function in coders/jp2.c.","status":"published","published":"2019-06-26T17:09:05Z","modified":"2024-08-04T23:41:10Z","updated_at":"2026-11-03T02:40:44.337354Z"}],"ghsa":[{"id":"GHSA-c95q-hjp6-cfq4","title":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image...","description":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image function in coders/jp2.c.","status":"published","published":"2022-05-24T16:48:42Z","modified":"2023-01-28T05:05:34Z","updated_at":"2026-11-02T14:44:21.48183Z"}],"nvd":[{"id":"CVE-2019-12977","description":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image function in coders/jp2.c.","status":"published","published":"2019-06-26T18:15:10.323Z","modified":"2026-06-17T02:15:50.473Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:05:17.695191Z"}],"osv":[{"id":"CVE-2019-12977","description":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image function in coders/jp2.c.","status":"published","published":"2019-06-26T18:15:10.323Z","modified":"2026-10-24T10:47:41.633844751Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-12977","description":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image function in coders/jp2.c.","status":"published","published":"2019-06-26T18:15:10.323Z","modified":"2026-09-21T07:02:03.261673578Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"UBUNTU-CVE-2019-12977","description":"ImageMagick 7.0.8-34 has a \"use of uninitialized value\" vulnerability in the WriteJP2Image function in coders/jp2.c.","status":"published","published":"2019-06-26T18:15:00Z","modified":"2026-04-22T12:09:19.752352Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"DLA-2333-1","title":"imagemagick - security update","status":"published","published":"2020-08-18T00:00:00Z","modified":"2026-03-09T01:21:30.213896Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4712-1","title":"imagemagick - security update","status":"published","published":"2020-06-30T00:00:00Z","modified":"2026-03-09T02:10:39.846734Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2019:1983-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).\n- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).\n- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).\n- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).\n- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).\n- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).\n- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).\n- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).\n- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).\n- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).\n- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).\n- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).\n- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).\n- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).\n- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).\n- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).\n- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).\n- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).\n- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).\n- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).\n- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).\n- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).\n- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).\n- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).\n- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).\n- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).\n- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).\n- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).\n- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).\n- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-21T08:22:04Z","modified":"2025-05-07T18:10:33.620909Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:2106-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).\n- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).\n- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).\n- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).\n- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).\n- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).\n- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).\n- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).\n- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).\n- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).\n- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).\n- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).\n- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).\n- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).\n- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).\n- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).\n- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).\n- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).\n- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).\n- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).\n- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).\n- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).\n- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).\n- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).\n- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).\n- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).\n- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).\n- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).\n- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).\n- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).\n","status":"published","published":"2019-08-09T15:40:37Z","modified":"2026-02-04T04:28:28.43364Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-4192-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2019-11-14T14:08:09Z","modified":"2026-04-27T15:48:48.026412762Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}