{"id":"CVE-2019-13136","aliases":["ALPINE-CVE-2019-13136","EUVD-2019-4670","GHSA-397j-8g2v-qc2h","JLSEC-2026-828","SUSE-SU-2019:2106-1","openSUSE-SU-2019:1983-1"],"status":"published","title":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function...","description":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01457,"percentile":0.73685,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2019-07-01T19:27:46Z","modified":"2026-11-03T06:31:36Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["7.1.0+0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.1.0+0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.9.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.9.1"}]}],"bundled":30}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/issues/1602","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/fe5f4b85e6b1b54d3b4588a77133c06ade46d891","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://support.f5.com/csp/article/K03512441?utm_source=f5support\u0026amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13136"},{"url":"https://github.com/advisories/GHSA-397j-8g2v-qc2h"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-13136","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192106-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1139884","tags":["report"]},{"url":"https://bugzilla.suse.com/1139885","tags":["report"]},{"url":"https://bugzilla.suse.com/1139886","tags":["report"]},{"url":"https://bugzilla.suse.com/1140100","tags":["report"]},{"url":"https://bugzilla.suse.com/1140102","tags":["report"]},{"url":"https://bugzilla.suse.com/1140103","tags":["report"]},{"url":"https://bugzilla.suse.com/1140104","tags":["report"]},{"url":"https://bugzilla.suse.com/1140105","tags":["report"]},{"url":"https://bugzilla.suse.com/1140106","tags":["report"]},{"url":"https://bugzilla.suse.com/1140110","tags":["report"]},{"url":"https://bugzilla.suse.com/1140111","tags":["report"]},{"url":"https://bugzilla.suse.com/1140501","tags":["report"]},{"url":"https://bugzilla.suse.com/1140513","tags":["report"]},{"url":"https://bugzilla.suse.com/1140520","tags":["report"]},{"url":"https://bugzilla.suse.com/1140534","tags":["report"]},{"url":"https://bugzilla.suse.com/1140538","tags":["report"]},{"url":"https://bugzilla.suse.com/1140543","tags":["report"]},{"url":"https://bugzilla.suse.com/1140545","tags":["report"]},{"url":"https://bugzilla.suse.com/1140547","tags":["report"]},{"url":"https://bugzilla.suse.com/1140549","tags":["report"]},{"url":"https://bugzilla.suse.com/1140552","tags":["report"]},{"url":"https://bugzilla.suse.com/1140554","tags":["report"]},{"url":"https://bugzilla.suse.com/1140664","tags":["report"]},{"url":"https://bugzilla.suse.com/1140665","tags":["report"]},{"url":"https://bugzilla.suse.com/1140666","tags":["report"]},{"url":"https://bugzilla.suse.com/1140667","tags":["report"]},{"url":"https://bugzilla.suse.com/1140668","tags":["report"]},{"url":"https://bugzilla.suse.com/1140669","tags":["report"]},{"url":"https://bugzilla.suse.com/1140673","tags":["report"]},{"url":"https://bugzilla.suse.com/1141171","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13454","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YNM2LVHZUR2GCLOOK3NWALHSAJQKCA67/#YNM2LVHZUR2GCLOOK3NWALHSAJQKCA67","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-13136","description":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.","status":"published","published":"2019-07-01T19:27:46Z","modified":"2024-08-04T23:41:10.492Z","updated_at":"2026-11-02T14:20:24.025419Z"}],"euvd":[{"id":"EUVD-2019-4670","description":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.","status":"published","published":"2019-07-01T19:27:46Z","modified":"2024-08-04T23:41:10Z","updated_at":"2026-11-03T02:40:43.860719Z"}],"ghsa":[{"id":"GHSA-397j-8g2v-qc2h","title":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function...","description":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.","status":"published","published":"2022-05-24T16:49:08Z","modified":"2024-04-04T01:08:36Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:55:55.605227Z"}],"nvd":[{"id":"CVE-2019-13136","description":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.","status":"published","published":"2019-07-01T20:15:11.417Z","modified":"2026-06-17T02:16:08.703Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:05:17.695191Z"}],"osv":[{"id":"ALPINE-CVE-2019-13136","description":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.","status":"published","published":"2019-07-01T20:15:11.417Z","modified":"2026-11-03T06:31:36.43356679Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"CVE-2019-13136","description":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.","status":"published","published":"2019-07-01T20:15:11.417Z","modified":"2026-10-24T14:20:25.274158006Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"JLSEC-2026-828","description":"ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in `coders/tiff.c`.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:23:42.212542526Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"openSUSE-SU-2019:1983-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).\n- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).\n- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).\n- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).\n- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).\n- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).\n- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).\n- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).\n- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).\n- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).\n- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).\n- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).\n- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).\n- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).\n- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).\n- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).\n- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).\n- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).\n- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).\n- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).\n- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).\n- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).\n- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).\n- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).\n- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).\n- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).\n- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).\n- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).\n- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).\n- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-21T08:22:04Z","modified":"2025-05-07T18:10:33.620909Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:2106-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).\n- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).\n- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).\n- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).\n- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).\n- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).\n- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).\n- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).\n- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).\n- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).\n- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).\n- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).\n- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).\n- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).\n- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).\n- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).\n- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).\n- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).\n- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).\n- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).\n- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).\n- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).\n- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).\n- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).\n- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).\n- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).\n- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).\n- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).\n- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).\n- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).\n","status":"published","published":"2019-08-09T15:40:37Z","modified":"2026-02-04T04:28:28.43364Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}