{"id":"CVE-2019-13137","aliases":["ALPINE-CVE-2019-13137","DEBIAN-CVE-2019-13137","DSA-4712-1","EUVD-2019-4671","GHSA-j2qh-jqph-8mrq","JLSEC-2026-829","SUSE-SU-2019:2106-1","UBUNTU-CVE-2019-13137","USN-4192-1","openSUSE-SU-2019:1983-1"],"status":"published","title":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders...","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01894,"percentile":0.79881,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2019-07-01T19:27:56Z","modified":"2026-11-03T06:31:35Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["6.9.12+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.13+esm21"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u1"}]}],"versions":["8:6.9.10.23+dfsg-2.1"],"bundled":41},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.9.12+0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm21"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10","8:6.7.7.10-6ubuntu3.13+esm11","8:6.7.7.10-6ubuntu3.13+esm12","8:6.7.7.10-6ubuntu3.13+esm13","8:6.7.7.10-6ubuntu3.13+esm14","8:6.7.7.10-6ubuntu3.13+esm15","8:6.7.7.10-6ubuntu3.13+esm16","8:6.7.7.10-6ubuntu3.13+esm17","8:6.7.7.10-6ubuntu3.13+esm18","8:6.7.7.10-6ubuntu3.13+esm19","8:6.7.7.10-6ubuntu3.13+esm20"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.15"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.8"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu9"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.15"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.8"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7"],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.9.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.9.1"}]}],"bundled":30}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/issues/1601","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/35ccb468ee2dcbe8ce9cf1e2f1957acc27f54c34","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/ImageMagick/ImageMagick6/commit/7d11230060fa9c8f67e53c85224daf6648805c7b","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","web"]},{"url":"https://usn.ubuntu.com/4192-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2020/dsa-4712","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13137"},{"url":"https://github.com/advisories/GHSA-j2qh-jqph-8mrq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-13137","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-13137","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192106-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1139884","tags":["report"]},{"url":"https://bugzilla.suse.com/1139885","tags":["report"]},{"url":"https://bugzilla.suse.com/1139886","tags":["report"]},{"url":"https://bugzilla.suse.com/1140100","tags":["report"]},{"url":"https://bugzilla.suse.com/1140102","tags":["report"]},{"url":"https://bugzilla.suse.com/1140103","tags":["report"]},{"url":"https://bugzilla.suse.com/1140104","tags":["report"]},{"url":"https://bugzilla.suse.com/1140105","tags":["report"]},{"url":"https://bugzilla.suse.com/1140106","tags":["report"]},{"url":"https://bugzilla.suse.com/1140110","tags":["report"]},{"url":"https://bugzilla.suse.com/1140111","tags":["report"]},{"url":"https://bugzilla.suse.com/1140501","tags":["report"]},{"url":"https://bugzilla.suse.com/1140513","tags":["report"]},{"url":"https://bugzilla.suse.com/1140520","tags":["report"]},{"url":"https://bugzilla.suse.com/1140534","tags":["report"]},{"url":"https://bugzilla.suse.com/1140538","tags":["report"]},{"url":"https://bugzilla.suse.com/1140543","tags":["report"]},{"url":"https://bugzilla.suse.com/1140545","tags":["report"]},{"url":"https://bugzilla.suse.com/1140547","tags":["report"]},{"url":"https://bugzilla.suse.com/1140549","tags":["report"]},{"url":"https://bugzilla.suse.com/1140552","tags":["report"]},{"url":"https://bugzilla.suse.com/1140554","tags":["report"]},{"url":"https://bugzilla.suse.com/1140664","tags":["report"]},{"url":"https://bugzilla.suse.com/1140665","tags":["report"]},{"url":"https://bugzilla.suse.com/1140666","tags":["report"]},{"url":"https://bugzilla.suse.com/1140667","tags":["report"]},{"url":"https://bugzilla.suse.com/1140668","tags":["report"]},{"url":"https://bugzilla.suse.com/1140669","tags":["report"]},{"url":"https://bugzilla.suse.com/1140673","tags":["report"]},{"url":"https://bugzilla.suse.com/1141171","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13454","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-13137","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4192-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13137","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8263-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-12974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16713","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YNM2LVHZUR2GCLOOK3NWALHSAJQKCA67/#YNM2LVHZUR2GCLOOK3NWALHSAJQKCA67","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-13137","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","status":"published","published":"2019-07-01T19:27:56Z","modified":"2024-08-04T23:41:10.509Z","updated_at":"2026-11-02T14:20:24.357095Z"}],"euvd":[{"id":"EUVD-2019-4671","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","status":"published","published":"2019-07-01T19:27:56Z","modified":"2024-08-04T23:41:10Z","updated_at":"2026-11-03T02:40:43.860719Z"}],"ghsa":[{"id":"GHSA-j2qh-jqph-8mrq","title":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders...","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","status":"published","published":"2022-05-24T16:49:08Z","modified":"2023-01-28T05:06:01Z","cwes":["CWE-401"],"updated_at":"2026-11-02T14:44:23.854277Z"}],"nvd":[{"id":"CVE-2019-13137","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","status":"published","published":"2019-07-01T20:15:11.493Z","modified":"2026-06-17T02:16:08.847Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:05:17.695191Z"}],"osv":[{"id":"ALPINE-CVE-2019-13137","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","status":"published","published":"2019-07-01T20:15:11.493Z","modified":"2026-11-03T06:31:35.846014566Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"CVE-2019-13137","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","status":"published","published":"2019-07-01T20:15:11.493Z","modified":"2026-10-24T14:03:35.850937985Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-13137","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","status":"published","published":"2019-07-01T20:15:11.493Z","modified":"2026-09-21T07:02:18.073474827Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"JLSEC-2026-829","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in `coders/ps.c`.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:23:42.217788301Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"UBUNTU-CVE-2019-13137","description":"ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.","status":"published","published":"2019-07-01T20:15:00Z","modified":"2026-05-14T12:44:37.544992179Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"DSA-4712-1","title":"imagemagick - security update","status":"published","published":"2020-06-30T00:00:00Z","modified":"2026-03-09T02:10:39.846734Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2019:1983-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).\n- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).\n- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).\n- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).\n- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).\n- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).\n- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).\n- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).\n- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).\n- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).\n- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).\n- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).\n- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).\n- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).\n- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).\n- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).\n- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).\n- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).\n- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).\n- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).\n- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).\n- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).\n- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).\n- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).\n- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).\n- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).\n- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).\n- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).\n- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).\n- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-21T08:22:04Z","modified":"2025-05-07T18:10:33.620909Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:2106-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).\n- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).\n- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).\n- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).\n- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).\n- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).\n- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).\n- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).\n- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).\n- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).\n- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).\n- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).\n- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).\n- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).\n- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).\n- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).\n- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).\n- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).\n- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).\n- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).\n- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).\n- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).\n- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).\n- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).\n- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).\n- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).\n- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).\n- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).\n- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).\n- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).\n","status":"published","published":"2019-08-09T15:40:37Z","modified":"2026-02-04T04:28:28.43364Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-4192-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2019-11-14T14:08:09Z","modified":"2026-04-27T15:48:48.026412762Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}